A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 7, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | Nov 7, 2019 |
| Debian | — | Upgrade linux | Feb 24, 2020 | Nov 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-tools-libs | Nov 28, 2019 | Nov 7, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 5, 2022 | Nov 27, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Nov 7, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 5, 2020 | Nov 7, 2019 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade ocfs2-kmp-default | Dec 9, 2019 | Nov 7, 2019 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-5.3.0-42-lowlatencyUpgrade linux-image-5.3.0-1012-kvmUpgrade linux-image-5.3.0-1016-azureUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-42-generic-lpaeUpgrade linux-image-5.3.0-1014-gcpUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-1011-oracleUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1030-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-gke-5.0Upgrade linux-image-5.3.0-1014-gkeUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-gcp-edgeUpgrade linux-image-gke-4.15Upgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-5.3.0-42-snapdragonUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-5.3.0-1019-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.3Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1071-azureUpgrade linux-image-5.0.0-1031-gcpUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-5.0.0-1032-azureUpgrade linux-image-5.0.0-1025-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oemUpgrade linux-image-5.3.0-42-genericUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1011-oracleUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1060-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-5.3.0-1013-awsUpgrade linux-image-virtual | Feb 19, 2020 | Nov 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub