linux, linux-aws, linux-aws-5.11, linux-aws-5.4, linux-azure, linux-azure-5.11, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.11, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oracle, linux-oracle-5.11, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerability
William Liu and Jamie Hill-Daniel discovered that the file system context functionality in the Linux kernel contained an integer underflow vulnerability, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code.
02 / AFFECTED SOFTWARE
Affected packages
29 explicit affected versions
29 explicit affected versions
30 explicit affected versions
23 explicit affected versions
23 explicit affected versions
36 explicit affected versions
29 explicit affected versions
27 explicit affected versions
48 explicit affected versions
41 explicit affected versions
10 explicit affected versions
39 explicit affected versions
11 explicit affected versions
10 explicit affected versions
40 explicit affected versions
10 explicit affected versions
18 explicit affected versions
18 explicit affected versions
7 explicit affected versions
36 explicit affected versions
25 explicit affected versions
10 explicit affected versions
8 explicit affected versions
39 explicit affected versions
10 explicit affected versions
31 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
William Liu and Jamie Hill-Daniel discovered that the file system context functionality in the Linux kernel contained an integer underflow vulnerability, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code.
05 / REFERENCES