A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown or otherwise rendered inaccessible until it is remounted leading to a denial of service. The highest threat from this vulnerability is to system availability.

🗓️ 25 Sep 2020 07:00:00Reported by MicrosoftType

Linux kernel flaw before 5.9-rc4: XFS validator may mark valid inodes as corrupt, causing denial of service.

Reporter	Title	Published	Views	Family All 295
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	11 Dec 202016:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus	6 Oct 202101:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities.	22 Nov 202206:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PostgreSQL, Apache, Golang Go, and Linux Kernel affect IBM Spectrum Copy Data Management	10 Dec 202123:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	2 Feb 202105:06	–	ibm
Tenable Nessus	Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-016)	2 May 202200:00	–	nessus
Tenable Nessus	CentOS 8 : kernel (CESA-2020:4286)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : kpatch-patch (RHSA-2020:5050)	9 Oct 202400:00	–	nessus
Tenable Nessus	CentOS 7 : kernel (RHSA-2020:5437)	22 Dec 202000:00	–	nessus
Tenable Nessus	Debian DLA-2385-1 : linux-4.19 security update	29 Sep 202000:00	–	nessus

Vulners

Node

25 Sep 2020 07:00Current

8.2High risk

Vulners AI Score8.2

CVSS 24.7

CVSS 3.15.5

EPSS0.00117