It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-5.4.0-1020-awsUpgrade linux-image-5.4.0-1021-gcpUpgrade linux-image-5.3.0-1032-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1079-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-1034-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-1065-oem-osp1Upgrade linux-image-4.15.0-1083-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-1032-awsUpgrade linux-image-4.15.0-112-lowlatencyUpgrade linux-image-5.4.0-1015-raspiUpgrade linux-image-4.15.0-1066-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-186-lowlatencyUpgrade linux-image-5.3.0-64-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-186-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1071-kvmUpgrade linux-image-4.15.0-112-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.3Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1022-azureUpgrade linux-image-4.4.0-186-powerpc-smpUpgrade linux-image-4.4.0-186-genericUpgrade linux-image-4.4.0-186-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1092-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-42-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-112-genericUpgrade linux-image-5.3.0-1030-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-186-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-186-powerpc64-embUpgrade linux-image-5.3.0-64-genericUpgrade linux-image-5.0.0-1045-gkeUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1050-oracleUpgrade linux-image-4.15.0-1080-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-1075-awsUpgrade linux-image-5.3.0-1030-raspi2Upgrade linux-image-gke-5.3Upgrade linux-image-awsUpgrade linux-image-4.15.0-1067-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-42-genericUpgrade linux-image-4.4.0-1111-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1093-oemUpgrade linux-image-kvmUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.4.0-1077-kvmUpgrade linux-image-5.4.0-30-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.4.0-1021-oracleUpgrade linux-image-aws-hweUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1032-gcpUpgrade linux-image-5.3.0-64-lowlatencyUpgrade linux-image-5.4.0-42-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1136-raspi2Upgrade linux-image-4.4.0-1140-snapdragon | Aug 5, 2020 | Jul 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub