CVE-2020-11935CWE-911
aufs: improperly managed inode reference counts in the vfsub_dentry_open() method
Medium · published April 7, 2023
What it is
It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.
The record
Technical detail
- CVSS v3.1
- 4.4 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00200 · 9.3th percentile
- Weakness
- CWE-911 · Improper Update of Reference Count
- Published
- 2023-04-07T00:00Z
EPSS history
Timeline