Total vulnerabilities in the database
The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 5.1-rc2 | 5.1-rc2.x |
| linux / linux_kernel | 5.1-rc3 | 5.1-rc3.x |
| linux / linux_kernel | 5.1-rc4 | 5.1-rc4.x |
| linux / linux_kernel | 5.1-rc1 | 5.1-rc1.x |
| linux / linux_kernel | 4.5 | 4.9.181 |
| linux / linux_kernel | - | 4.4.216 |
| linux / linux_kernel | 4.10 | 4.14.116 |
| linux / linux_kernel | 4.15 | 4.19.39 |
| linux / linux_kernel | 4.20 | 5.0.12 |
| debian / debian_linux | 8.0 | 8.0.x |
| canonical / ubuntu_linux | 18.04 | 18.04.x |
| canonical / ubuntu_linux | 19.04 | 19.04.x |
| canonical / ubuntu_linux | 16.04 | 16.04.x |