ALT Linux Team

Package kernel-image-un-def update in sisyphus on 2020-09-16

ALT-PU-2020-2827-1

Package kernel-image-un-def updated to version 5.8.9-alt1 for branch sisyphus in task 258119.

Closed vulnerabilities

Published: 2020-09-07

BDU:2020-05656

Уязвимость rbd-драйвера операционной системы Linux, позволяющая нарушителю повысить свои привилегии

Severity: MEDIUM (4.1) Vector: AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
Severity: LOW (3.8) Vector: AV:L/AC:H/Au:S/C:N/I:C/A:N
References:
Published: 2020-09-13
Modified: 2024-11-21

CVE-2020-25284

The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe.

Severity: LOW (1.9) Vector: AV:L/AC:M/Au:N/C:N/I:P/A:N
Severity: MEDIUM (4.1) Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top