A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 7, 2019 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-4.14.192-147.314Upgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perf | Aug 25, 2020 | Nov 7, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Nov 7, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Nov 7, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade perf | Dec 11, 2019 | Nov 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Jan 3, 2020 | Nov 7, 2019 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Nov 7, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Nov 7, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-extra | Jan 15, 2020 | Nov 7, 2019 |
| Ubuntu | — | Upgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-edgeUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-4.15.0-1071-raspi2Upgrade linux-image-4.15.0-118-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1097-oemUpgrade linux-image-4.15.0-1083-awsUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-5.4.0-48-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1084-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1070-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1025-awsUpgrade linux-image-4.15.0-1075-kvmUpgrade linux-image-4.15.0-1054-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1087-snapdragonUpgrade linux-image-4.15.0-1096-azureUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-118-genericUpgrade linux-image-oemUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-1026-azureUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-4.15.0-118-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic | Sep 22, 2020 | Nov 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub