CVE-2020-11935: aufs: improperly managed inode reference counts in the vfsub_dentry_open() method
Published Apr 7, 2023
·Updated
It was discovered that aufs improperly managed inode reference counts in the vfsubdentryopen() method. A local attacker could use this vulnerability to cause a denial of service attack.
Affected Software
7 affected components
debian/aufs
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=20.04
Debian Debian Linux=10.0
Linux Linux kernel
Event History
Apr 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:37 PM
Description
Aug 15, 2026
Data Sourced
via Ubuntu·12:07 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-11935?
CVE-2020-11935 is a vulnerability in aufs that allows a local attacker to cause a denial of service attack.
2
What is the severity of CVE-2020-11935?
The severity of CVE-2020-11935 is not specified.
3
How can a local attacker exploit CVE-2020-11935?
A local attacker can exploit CVE-2020-11935 by improperly managing inode reference counts in the vfsub_dentry_open() method.
4
Which software versions are affected by CVE-2020-11935?
The software versions affected by CVE-2020-11935 are listed in the provided reference links.
5
How can I fix CVE-2020-11935?
To fix CVE-2020-11935, update to the recommended software versions as mentioned in the provided reference links.