Description
relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- canonical / Ubuntu Linux14.04 – 14.04
- canonical / Ubuntu Linux20.04 – 20.04
- canonical / Ubuntu Linux18.04 – 18.04
- canonical / Ubuntu Linux16.04 – 16.04
- Debian / debian_linux10.0 – 10.0
- Debian / debian_linux8.0 – 8.0
- Debian / debian_linux9.0 – 9.0
- linux / linux_kernel5.4.1
- NetApp / active_iq_unified_manager9.5 –
- NetApp / hci_compute_node
- NetApp / hci_management_node
- NetApp / hci_storage_node
- NetApp / solidfire
- opensuse / Leap15.2 – 15.2
- opensuse / Leap15.1 – 15.1
References
- MISChttps://syzkaller-ppc64.appspot.com/bug?id=1c09906c83a8ea811a9e318c2a4f8e243becc6f8
- MISChttps://syzkaller-ppc64.appspot.com/bug?id=b05b4d005191cc375cdf848c3d4d980308d50531
- MISChttps://syzkaller.appspot.com/bug?id=e4265490d26d6c01cd9bc79dc915ef0a1bf15046
- MISChttps://syzkaller.appspot.com/bug?id=f4d1cb4330bd3ddf4a628332b4285407b2eedd7b
- MISChttps://lore.kernel.org/lkml/20191129013745.7168-1-dja%40axtens.net/
- MAILING_LISThttps://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
- VENDOR_ADVISORYhttps://www.debian.org/security/2020/dsa-4698
- VENDOR_ADVISORYhttps://www.debian.org/security/2020/dsa-4699
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html
- VENDOR_ADVISORYhttps://usn.ubuntu.com/4414-1/
- VENDOR_ADVISORYhttps://usn.ubuntu.com/4425-1/
- VENDOR_ADVISORYhttps://usn.ubuntu.com/4439-1/
- VENDOR_ADVISORYhttps://usn.ubuntu.com/4440-1/
- MISChttps://security.netapp.com/advisory/ntap-20210129-0004/
Updated 44m ago · 8 sources