8.8
Élevée
CVE-2021-3492 Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults…
Description
Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux kernel 5.8 | premières → < 5.8.0-50.56 | 5.8.0-50.56 |
| Linux kernel 5.4 | premières → < 5.4.0-72.80 | 5.4.0-72.80 |