Riskcovery

CVE-2020-11935

aufs: improperly managed inode reference counts in the vfsub_dentry_open() method

State
Published
Severity
4.4 Medium
Published
Apr 7, 2023
Updated
Aug 4, 2024
Reserved
Apr 20, 2020

Read the record on cve.org

Description

It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.

Scores

CVSSScoreVectorSource
3.14.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hcanonical

Weaknesses

  • CWE-911 Improper Update of Reference Count

Affected Products

ProductVersions
Linux kernel (aufs filesystem module)Ubuntu
  • 4.4.0-186.216 to before 4.4*Not affected
  • 4.15.0-112.113 to before 4.15*Not affected
  • 5.4.0-42.46 to before 5.4*Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.