Skip to content
OpenAdvisories

Description

In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 5.5.13-1 —
Debian 13 linux 5.5.13-1 —
Debian 12 linux 5.5.13-1 —
Debian 9 linux 4.9.210-1+deb9u1 DSA-4698-1
Debian 8 linux 3.16.84-1 DLA-2241-1
Debian 8 linux-4.9 4.9.210-1+deb9u1~deb8u1 DLA-2242-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +2 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-99.100 USN-4345-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1066.70 USN-4345-1
Ubuntu 18.04 LTS linux-aws-5.3 5.3.0-1017.18~18.04.1 —
Ubuntu 18.04 LTS linux-azure-5.3 5.3.0-1020.21~18.04.1 USN-4342-1
Ubuntu 18.04 LTS linux-gcp +6 No fix yet —
Ubuntu 18.04 LTS linux-gcp-5.3 +1 5.3.0-1018.19~18.04.1 USN-4342-1
Ubuntu 18.04 LTS linux-gke-4.15 4.15.0-1058.61 USN-4345-1
Ubuntu 18.04 LTS linux-gke-5.0 5.0.0-1035.36 USN-4344-1
Ubuntu 18.04 LTS linux-hwe 5.3.0-51.44~18.04.2 USN-4342-1
Ubuntu 18.04 LTS linux-kvm 4.15.0-1059.60 USN-4345-1
Ubuntu 18.04 LTS linux-oem 4.15.0-1080.90 USN-4345-1
Ubuntu 18.04 LTS linux-oem-osp1 5.0.0-1050.55 USN-4344-1
Ubuntu 18.04 LTS linux-oracle 4.15.0-1038.42 USN-4345-1
Ubuntu 18.04 LTS linux-oracle-5.3 5.3.0-1016.18~18.04.1 USN-4342-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1061.65 USN-4345-1
Ubuntu 18.04 LTS linux-raspi2-5.3 5.3.0-1023.25~18.04.1 USN-4342-1
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1077.84 USN-4345-1
Ubuntu 16.04 LTS linux 4.4.0-178.208 USN-4346-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1106.117 USN-4346-1
Ubuntu 16.04 LTS linux-aws-hwe 4.15.0-1066.70~16.04.1 USN-4345-1
Ubuntu 16.04 LTS linux-azure 4.15.0-1082.92~16.04.1 USN-4345-1
Ubuntu 16.04 LTS linux-gcp 4.15.0-1061.65 USN-4345-1
Ubuntu 16.04 LTS linux-hwe 4.15.0-99.100~16.04.1 USN-4345-1
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu 16.04 LTS linux-kvm 4.4.0-1070.77 USN-4346-1
Ubuntu 16.04 LTS linux-oracle 4.15.0-1038.42~16.04.1 USN-4345-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1132.141 USN-4346-1
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1136.144 USN-4346-1
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro FIPS 18.04 LTS linux-aws-fips +2 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2018.18 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2006.7 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips 4.15.0-1029.34 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1033.38 —
Ubuntu Pro 14.04 LTS linux No fix yet —
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1066.70 USN-4346-1
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1082.92~14.04.1 —
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-178.208~14.04.1 USN-4346-1
ReleasePackageFixed inAdvisory
RHEL 8 kernel-rt +12 4.18.0-193.rt13.51.el8 RHSA-2020:1567
RHEL 8 perf +26 4.18.0-193.el8 RHSA-2020:1769
RHEL 7 kernel +15 3.10.0-1127.8.2.el7 RHSA-2020:2104, RHSA-2020:2082
RHEL 7 kernel-alt 4.14.0-115.21.2.el7a RHSA-2020:2104
RHEL 7 kernel-rt +10 3.10.0-1127.8.2.rt56.1103.el7 RHSA-2020:2085
RHEL 7 perf +2 3.10.0-957.54.1.el7 RHSA-2020:2289, RHSA-2020:2104, RHSA-2020:2082
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 8.1 EUS kpatch-patch-4_18_0-147 1-13.el8 RHSA-2020:2203
RHEL 8.1 EUS kpatch-patch-4_18_0-147_0_2 +1 1-9.el8 RHSA-2020:2203
RHEL 8.1 EUS kpatch-patch-4_18_0-147_3_1 1-9.el8_1 RHSA-2020:2203
RHEL 8.1 EUS kpatch-patch-4_18_0-147_5_1 1-4.el8_1 RHSA-2020:2203
RHEL 8.1 EUS kpatch-patch-4_18_0-147_8_1 1-2.el8_1 RHSA-2020:2203
RHEL 8.1 EUS perf +26 4.18.0-147.13.2.el8_1 RHSA-2020:2199
RHEL 8.0 E4S perf +18 4.18.0-80.18.1.el8_0 RHSA-2020:1966
RHEL 7.7 EUS kpatch-patch-3_10_0-1062 1-18.el7 RHSA-2020:2519
RHEL 7.7 EUS kpatch-patch-3_10_0-1062_12_1 +2 1-2.el7 RHSA-2020:2519
RHEL 7.7 EUS kpatch-patch-3_10_0-1062_1_1 1-17.el7 RHSA-2020:2519
RHEL 7.7 EUS kpatch-patch-3_10_0-1062_1_2 1-16.el7 RHSA-2020:2519
RHEL 7.7 EUS kpatch-patch-3_10_0-1062_4_1 1-13.el7 RHSA-2020:2519
RHEL 7.7 EUS kpatch-patch-3_10_0-1062_4_2 +1 1-10.el7 RHSA-2020:2519
RHEL 7.7 EUS kpatch-patch-3_10_0-1062_7_1 +1 1-7.el7 RHSA-2020:2519
RHEL 7.7 EUS perf +18 3.10.0-1062.26.1.el7 RHSA-2020:2522
RHEL 7.6 EUS kpatch-patch-3_10_0-957_35_1 1-9.el7 RHSA-2020:2291
RHEL 7.6 EUS kpatch-patch-3_10_0-957_35_2 1-8.el7 RHSA-2020:2291
RHEL 7.6 EUS kpatch-patch-3_10_0-957_38_1 1-7.el7 RHSA-2020:2291
RHEL 7.6 EUS kpatch-patch-3_10_0-957_38_2 +1 1-6.el7 RHSA-2020:2291
RHEL 7.6 EUS kpatch-patch-3_10_0-957_41_1 +1 1-4.el7 RHSA-2020:2291
RHEL 7.6 EUS kpatch-patch-3_10_0-957_46_1 +1 1-3.el7 RHSA-2020:2291
RHEL 7.6 EUS perf +18 3.10.0-957.54.1.el7 RHSA-2020:2289
RHEL 7.4 TUS perf +11 3.10.0-693.67.1.el7 RHSA-2020:2214
RHEL 7.4 E4S perf +13 3.10.0-693.67.1.el7 RHSA-2020:2214
RHEL 7.4 AUS perf +11 3.10.0-693.67.1.el7 RHSA-2020:2214
RHEL 7.3 TUS perf +11 3.10.0-514.76.1.el7 RHSA-2020:2277
RHEL 7.3 E4S perf +13 3.10.0-514.76.1.el7 RHSA-2020:2277
RHEL 7.3 AUS perf +11 3.10.0-514.76.1.el7 RHSA-2020:2277
RHEL 7.2 AUS perf +11 3.10.0-327.88.1.el7 RHSA-2020:2285
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.67.1.rt56.665.el6rt RHSA-2020:2242
ReleasePackageFixed inAdvisory
SLES 15 SP1 kernel-azure +2 4.12.14-8.30.1 SUSE-SU-2020:1087-1
SLES 15 SP1 kernel-docs +5 4.12.14-197.37.1 SUSE-SU-2020:0836-1
SLES 15 kernel-docs +6 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.13.1 SUSE-SU-2020:1118-1
SLES 12 SP5 kernel-docs +4 4.12.14-122.20.1 SUSE-SU-2020:1142-1
SLES 12 SP4 kernel-azure +2 4.12.14-6.40.1 SUSE-SU-2020:1119-1
SLES 12 SP4 kernel-docs +4 4.12.14-95.51.1 SUSE-SU-2020:1141-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
Show 20 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 kernel-syms +2 4.4.121-92.129.1 SUSE-SU-2020:1255-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_34 1-3.3.1 SUSE-SU-2020:1255-1
SLES 11 SP4 kernel-ec2 +8 3.0.101-108.111.1 SUSE-SU-2020:14354-1
SLES for SAP 15 kernel-docs +5 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.13.1 SUSE-SU-2020:1118-1
SLES for SAP 12 SP5 kernel-syms +2 4.12.14-122.20.1 SUSE-SU-2020:1142-1
SLES for SAP 12 SP4 kernel-azure +2 4.12.14-6.40.1 SUSE-SU-2020:1119-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.51.1 SUSE-SU-2020:1141-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.129.1 SUSE-SU-2020:1255-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_34 1-3.3.1 SUSE-SU-2020:1255-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.8.1 SUSE-SU-2020:1084-1
SLE Real Time 12 SP4 kernel-rt +3 4.12.14-8.18.1 SUSE-SU-2020:1085-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.37.1 SUSE-SU-2020:0836-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_10 1-3.3.1 SUSE-SU-2020:0836-1
SLE Live Patching 15 kernel-default 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_18 1-1.5.1 SUSE-SU-2020:1663-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.20.1 SUSE-SU-2020:1142-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_4 1-8.3.1 SUSE-SU-2020:1142-1
SLE Live Patching 12 SP4 kernel-default 4.12.14-95.51.1 SUSE-SU-2020:1141-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_13 1-6.3.1 SUSE-SU-2020:1141-1
SLE HPC 15 kernel-docs +5 4.12.14-150.52.1 SUSE-SU-2020:1663-1
SUSE Real Time Module 15 SP1 kernel-rt +3 4.12.14-14.23.1 SUSE-SU-2020:1123-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.129.1 SUSE-SU-2020:1255-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_34 1-3.3.1 SUSE-SU-2020:1255-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
SUSE Enterprise Storage 5 kernel-syms +2 4.4.180-94.116.1 SUSE-SU-2020:1275-1
SUSE Enterprise Storage 5 kgraft-patch-SLE12-SP3_Update_31 1-4.3.1 SUSE-SU-2020:1275-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.1 kernel-docs +8 4.12.14-lp151.28.44.1 openSUSE-SU-2020:0388-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 kernel-livepatch-4.14.181-140.257 1.0-0.amzn2 ALAS2-2020-1431
Amazon Linux 2 perf +8 4.14.181-140.257.amzn2 ALAS2-2020-1431

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 perf +19 4.18.0-193.el8 ELSA-2020-1769
Oracle Linux 7 kernel-uek +5 4.1.12-124.43.4.el7uek ELSA-2020-5866, ELSA-2020-5676, ELSA-2020-5663
Oracle Linux 7 kernel-uek-tools +3 4.14.35-1902.302.2.el7uek ELSA-2020-5676, ELSA-2020-5663
Oracle Linux 7 perf +12 3.10.0-1127.8.2.el7 ELSA-2020-5676, ELSA-2020-5663, ELSA-2020-2082

Advisories 43

References