Skip to content
OpenAdvisories

Description

The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 4.19.37-1 —
Debian 13 linux 4.19.37-1 —
Debian 12 linux 4.19.37-1 —
Debian 8 linux-4.9 4.9.189-3~deb8u1 DLA-1919-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +2 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-60.67 USN-4115-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1047.49 USN-4118-1
Ubuntu 18.04 LTS linux-azure 5.0.0-1014.14~18.04.1 —
Ubuntu 18.04 LTS linux-gcp 4.15.0-1042.45 —
Ubuntu 18.04 LTS linux-gke-4.15 4.15.0-1041.43 USN-4115-1
Ubuntu 18.04 LTS linux-hwe 5.0.0-23.24~18.04.1 USN-4069-2
Ubuntu 18.04 LTS linux-hwe-edge No fix yet —
Ubuntu 18.04 LTS linux-kvm 4.15.0-1043.43 USN-4115-1
Ubuntu 18.04 LTS linux-oem 4.15.0-1056.65 —
Ubuntu 18.04 LTS linux-oem-osp1 5.0.0-1015.16 —
Ubuntu 18.04 LTS linux-oracle 4.15.0-1022.25 USN-4115-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1044.47 USN-4115-1
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1062.69 —
Ubuntu 16.04 LTS linux 4.4.0-165.193 USN-4145-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1095.106 USN-4145-1
Ubuntu 16.04 LTS linux-aws-hwe 4.15.0-1047.49~16.04.1 USN-4118-1
Ubuntu 16.04 LTS linux-azure 4.15.0-1056.61 USN-4115-1
Ubuntu 16.04 LTS linux-gcp 4.15.0-1041.43 USN-4115-1
Ubuntu 16.04 LTS linux-hwe 4.15.0-60.67~16.04.1 USN-4115-1
Ubuntu 16.04 LTS linux-kvm 4.4.0-1059.66 USN-4145-1
Ubuntu 16.04 LTS linux-oracle 4.15.0-1022.25~16.04.1 USN-4115-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1123.132 USN-4145-1
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1127.135 USN-4145-1
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro FIPS 18.04 LTS linux-aws-fips +2 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2018.18 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2006.7 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1022.27 —
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 5.15.0-1114.123~20.04.1 —
Ubuntu Pro 14.04 LTS linux No fix yet —
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1055.59 —
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1059.64~14.04.1 —
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-165.193~14.04.1 —
ReleasePackageFixed inAdvisory
RHEL 8 kernel-rt +12 4.18.0-80.11.1.rt9.156.el8_0 RHSA-2019:2741
RHEL 8 perf +28 4.18.0-80.11.1.el8_0 RHSA-2019:2703
RHEL 7 kernel +15 3.10.0-1062.18.1.el7 RHSA-2020:0834, RHSA-2020:0174
RHEL 7 kernel-alt 4.14.0-115.17.1.el7a RHSA-2020:0174
RHEL 7 kernel-rt +10 3.10.0-1062.18.1.rt56.1044.el7 RHSA-2020:0839
RHEL 7 perf +2 3.10.0-957.56.1.el7 RHSA-2020:2851, RHSA-2020:0834, RHSA-2020:0174
RHEL 6 kernel +8 2.6.32-754.35.1.el6 RHSA-2020:4182
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7.6 EUS perf +18 3.10.0-957.56.1.el7 RHSA-2020:2851
RHEL 7.4 TUS perf +11 3.10.0-693.71.2.el7 RHSA-2020:3230
RHEL 7.4 E4S perf +13 3.10.0-693.71.2.el7 RHSA-2020:3230
RHEL 7.4 AUS perf +11 3.10.0-693.71.2.el7 RHSA-2020:3230
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.71.2.rt56.670.el6rt RHSA-2020:3266
ReleasePackageFixed inAdvisory
SLES 15 SP1 kernel-docs +5 4.12.14-197.4.1 SUSE-SU-2019:1550-1
SLES 15 kernel-azure +2 4.12.14-5.30.1 SUSE-SU-2019:1535-1
SLES 15 kernel-docs +6 4.12.14-150.22.1 SUSE-SU-2019:1529-1
SLES 12 SP4 kernel-azure +2 4.12.14-6.15.2 SUSE-SU-2019:1536-1
SLES 12 SP4 kernel-docs +4 4.12.14-95.19.1 SUSE-SU-2019:1530-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.100.1 SUSE-SU-2019:1852-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_27 1-4.3.1 SUSE-SU-2019:1852-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.117.1 SUSE-SU-2019:1823-2, SUSE-SU-2019:1823-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_23 9-2.1 SUSE-SU-2019:1671-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_24 7-2.1 SUSE-SU-2019:1671-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_25 6-2.1 SUSE-SU-2019:1671-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_26 5-2.1 SUSE-SU-2019:1671-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_27 +2 3-2.1 SUSE-SU-2019:1671-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_30 2-2.1 SUSE-SU-2019:1767-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_31 1-3.3.1 SUSE-SU-2019:1823-1
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP1 kernel-xen +3 3.12.74-60.64.118.1 SUSE-SU-2019:1870-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_29 11-2.1 SUSE-SU-2019:1668-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_30 9-2.1 SUSE-SU-2019:1668-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_31 +1 7-2.1 SUSE-SU-2019:1668-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_33 3-2.1 SUSE-SU-2019:2821-1, SUSE-SU-2019:1668-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_34 2-2.1 SUSE-SU-2019:1767-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_35 1-2.3.1 SUSE-SU-2019:1870-1
SLES 12 kernel-ec2 3.12.74-60.64.118.1 SUSE-SU-2019:1870-1
SLES 12 kgraft-patch-SLE12_Update_36 11-2.1 SUSE-SU-2019:1668-1
SLES 12 kgraft-patch-SLE12_Update_37 9-2.1 SUSE-SU-2019:1668-1
SLES 12 kgraft-patch-SLE12_Update_38 7-2.1 SUSE-SU-2019:1668-1
SLES 12 kgraft-patch-SLE12_Update_39 3-2.1 SUSE-SU-2019:1668-1
SLES for SAP 12 SP4 kernel-azure +2 4.12.14-6.15.2 SUSE-SU-2019:1536-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.19.1 SUSE-SU-2019:1530-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.100.1 SUSE-SU-2019:1852-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_27 1-4.3.1 SUSE-SU-2019:1852-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.117.1 SUSE-SU-2019:1823-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_23 9-2.1 SUSE-SU-2019:1671-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_24 7-2.1 SUSE-SU-2019:1671-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_25 6-2.1 SUSE-SU-2019:1671-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_26 5-2.1 SUSE-SU-2019:1671-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_27 +2 3-2.1 SUSE-SU-2019:1671-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_30 2-2.1 SUSE-SU-2019:1767-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_31 1-3.3.1 SUSE-SU-2019:1823-1
SLES for SAP 12 SP1 kernel-xen +3 3.12.74-60.64.118.1 SUSE-SU-2019:1870-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_29 11-2.1 SUSE-SU-2019:1668-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_30 9-2.1 SUSE-SU-2019:1668-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_31 +1 7-2.1 SUSE-SU-2019:1668-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_33 3-2.1 SUSE-SU-2019:2821-1, SUSE-SU-2019:1668-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_34 2-2.1 SUSE-SU-2019:1767-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_35 1-2.3.1 SUSE-SU-2019:1870-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.4.1 SUSE-SU-2019:1550-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_0 2-4.1 SUSE-SU-2019:1588-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_1 1-3.3.1 SUSE-SU-2019:1550-1
SLE Live Patching 15 kernel-default 4.12.14-150.22.1 SUSE-SU-2019:1529-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_1 10-2.1 SUSE-SU-2019:1581-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_11 1-1.5.1 SUSE-SU-2019:1529-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_2 9-2.1 SUSE-SU-2019:1581-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_3 7-2.1 SUSE-SU-2019:1581-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_4 +1 6-2.1 SUSE-SU-2019:1581-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_6 5-2.1 SUSE-SU-2019:1581-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_7 4-2.1 SUSE-SU-2019:1581-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_8 3-2.1 SUSE-SU-2019:1581-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_9 +1 2-2.1 SUSE-SU-2019:1588-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_0 5-2.13.1 SUSE-SU-2019:1674-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_1 4-2.1 SUSE-SU-2019:1674-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_2 3-2.1 SUSE-SU-2019:1674-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_3 +1 2-2.1 SUSE-SU-2019:1671-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_5 1-6.3.1 SUSE-SU-2019:1530-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_14 +1 9-2.1 SUSE-SU-2019:1671-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_16 +3 6-2.1 SUSE-SU-2019:1671-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_20 5-2.1 SUSE-SU-2019:1671-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_21 +1 4-2.1 SUSE-SU-2019:1671-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_23 3-2.1 SUSE-SU-2019:1671-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_24 +2 2-2.1 SUSE-SU-2019:1768-1, SUSE-SU-2019:1671-1
SUSE Real Time Module 15 SP1 kernel-rt +3 4.12.14-14.8.1 SUSE-SU-2019:2430-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.100.1 SUSE-SU-2019:1852-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_27 1-4.3.1 SUSE-SU-2019:1852-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.117.1 SUSE-SU-2019:1823-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_31 1-3.3.1 SUSE-SU-2019:1823-1
SUSE Enterprise Storage 5 kernel-syms +2 4.4.180-94.100.1 SUSE-SU-2019:1852-1
SUSE Enterprise Storage 5 kgraft-patch-SLE12-SP3_Update_27 1-4.3.1 SUSE-SU-2019:1852-1
SUSE Enterprise Storage 4 kernel-syms +2 4.4.121-92.117.1 SUSE-SU-2019:1823-1
SUSE Enterprise Storage 4 kgraft-patch-SLE12-SP2_Update_31 1-3.3.1 SUSE-SU-2019:1823-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.1 kernel-docs +8 4.12.14-lp151.28.7.1 openSUSE-SU-2019:1571-1
openSUSE Leap 15.0 kernel-docs +8 4.12.14-lp150.12.64.1 openSUSE-SU-2019:1579-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 perf +19 4.18.0-80.11.1.el8_0 ELSA-2019-2703
Oracle Linux 7 kernel-uek +5 4.1.12-124.43.4.el7uek ELSA-2020-5866, ELSA-2020-5845
Oracle Linux 7 kernel-uek-tools +3 4.14.35-1902.306.2.el7uek ELSA-2020-5845
Oracle Linux 7 perf +12 3.10.0-1062.18.1.el7 ELSA-2020-5845, ELSA-2020-0834

Advisories 38

References