It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-4.4.0-186-genericUpgrade linux-image-4.4.0-186-powerpc-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-42-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.4.0-1022-azureUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.3.0-1032-awsUpgrade linux-image-4.15.0-112-lowlatencyUpgrade linux-image-5.3.0-64-generic-lpaeUpgrade linux-image-5.0.0-1065-oem-osp1Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-5.4.0-1021-gcpUpgrade linux-image-5.4.0-1020-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-5.3.0-1034-azureUpgrade linux-image-gkeop-5.3Upgrade linux-image-5.3.0-1032-gkeUpgrade linux-image-4.15.0-1066-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1079-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-186-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1092-azureUpgrade linux-image-virtualUpgrade linux-image-4.4.0-186-generic-lpaeUpgrade linux-image-4.4.0-186-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1015-raspiUpgrade linux-image-4.15.0-1083-snapdragonUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-112-generic-lpaeUpgrade linux-image-4.15.0-1071-kvmUpgrade linux-image-gkeUpgrade linux-image-4.4.0-186-powerpc64-embUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-42-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-30-genericUpgrade linux-image-4.4.0-1136-raspi2Upgrade linux-image-4.15.0-1080-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-1030-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.3.0-64-genericUpgrade linux-image-4.15.0-1093-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1077-kvmUpgrade linux-image-5.4.0-42-genericUpgrade linux-image-5.3.0-1030-oracleUpgrade linux-image-gke-5.0Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1067-raspi2Upgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1075-awsUpgrade linux-image-4.4.0-1140-snapdragonUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-4.15.0-112-genericUpgrade linux-image-gcpUpgrade linux-image-4.4.0-186-powerpc-e500mcUpgrade linux-image-4.4.0-1111-awsUpgrade linux-image-5.0.0-1045-gkeUpgrade linux-image-4.15.0-1050-oracleUpgrade linux-image-azure-edgeUpgrade linux-image-aws-hweUpgrade linux-image-5.3.0-1032-gcpUpgrade linux-image-5.4.0-1021-oracleUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gke-5.3Upgrade linux-image-gke-4.15Upgrade linux-image-5.3.0-64-lowlatency | Aug 5, 2020 | Jul 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub