Описание
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
Ссылки
- http://packetstormsecurity.com/files/168466/Linux-Stable-5.4-5.10-Use-After-Free-Race-Condition.htmlThird Party AdvisoryVDB Entry
- PatchThird Party Advisory
- ExploitIssue TrackingMailing ListPatchThird Party Advisory
- Release NotesVendor Advisory
- PatchVendor Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- http://packetstormsecurity.com/files/168466/Linux-Stable-5.4-5.10-Use-After-Free-Race-Condition.htmlThird Party AdvisoryVDB Entry
- PatchThird Party Advisory
- ExploitIssue TrackingMailing ListPatchThird Party Advisory
- Release NotesVendor Advisory
- PatchVendor Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 5.0 (включая) до 5.4.211 (исключая)Версия от 5.5 (включая) до 5.10.137 (исключая)Версия от 5.11 (включая) до 5.12.18 (исключая)Версия от 5.13 (включая) до 5.13.3 (исключая)
Одно из
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Конфигурация 3
Одно из
cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*
cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*
cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*
cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*
cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*
Конфигурация 4
Одно из
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*
EPSS
Процентиль: 1%
0.00013
Низкий
7 High
CVSS3
Дефекты
CWE-416
CWE-416
Связанные уязвимости
CVSS3: 7
ubuntu
почти 3 года назад
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
CVSS3: 7
redhat
почти 4 года назад
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
CVSS3: 7
debian
почти 3 года назад
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via ...
CVSS3: 4.7
github
больше 2 лет назад
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
EPSS
Процентиль: 1%
0.00013
Низкий
7 High
CVSS3
Дефекты
CWE-416
CWE-416