Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2020-11935

aufs: improperly managed inode reference counts in the vfsub_dentry_open() method

Description

It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubuntu Linux kernel (aufs filesystem module)

  • 4.4.0-186.216 to < 4.4*unaffected
  • 4.15.0-112.113 to < 4.15*unaffected
  • 5.4.0-42.46 to < 5.4*unaffected

References