A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.
Se ha detectado un fallo de uso de memoria previamente liberada en el archivo fs/ext4/namei.c:dx_insert_block() en el subcomponente del sistema de archivos del kernel de Linux. Este fallo permite a un atacante local con privilegios de usuario causar una denegación de servicio
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-416
|
| [email protected] | Secondary |
en
CWE-416
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd369a4e580> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd369a4e280> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd385578b40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd34bb9fcc0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd369a4d240> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd369a4dcc0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd38544a940> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd289fb8440> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd369a4e680> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd369a4d040> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd384120b00> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd340a51840> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd369a4d500> | Operating System |
| linux | linux_kernel | 2.6.12 | <built-in method update of dict object at 0x7fd369a4fb40> | Operating System |
| redhat | enterprise_linux | 8.0 | <built-in method update of dict object at 0x7fd369a4ff80> | Operating System |
| redhat | enterprise_linux | 9.0 | <built-in method update of dict object at 0x7fd369a4c100> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd369a4ce40> | Operating System |
| debian | debian_linux | 11.0 | <built-in method update of dict object at 0x7fd289fb9b40> | Operating System |
| canonical | ubuntu_linux | 14.04 | <built-in method update of dict object at 0x7fd34011edc0> | Operating System |
| canonical | ubuntu_linux | 16.04 | <built-in method update of dict object at 0x7fd341255580> | Operating System |
| canonical | ubuntu_linux | 18.04 | <built-in method update of dict object at 0x7fd289fb8740> | Operating System |
| canonical | ubuntu_linux | 20.04 | <built-in method update of dict object at 0x7fd34bb9c880> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* |