A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-kernel-tools-libs-devel | May 4, 2022 | Nov 18, 2019 | |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Sep 22, 2020 | Nov 18, 2019 |
| Debian | debian-upgrade-linux | Jul 30, 2024 | Nov 18, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bpftoolhuawei-euleros-2_0_sp8-upgrade-kernelhuawei-euleros-2_0_sp8-upgrade-kernel-develhuawei-euleros-2_0_sp8-upgrade-kernel-headershuawei-euleros-2_0_sp8-upgrade-kernel-sourcehuawei-euleros-2_0_sp8-upgrade-kernel-toolshuawei-euleros-2_0_sp8-upgrade-kernel-tools-libshuawei-euleros-2_0_sp8-upgrade-perfhuawei-euleros-2_0_sp8-upgrade-python-perfhuawei-euleros-2_0_sp8-upgrade-python3-perf | Jan 3, 2020 | Nov 18, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-kernel | Oct 7, 2020 | Nov 18, 2019 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Mar 12, 2021 | Nov 18, 2019 | |
| Redhat_linux | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Sep 22, 2020 | Nov 18, 2019 | |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-docssuse-upgrade-kernel-obs-buildsuse-upgrade-ocfs2-kmp-default | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1035-oracleubuntu-upgrade-linux-image-4-15-0-1055-gkeubuntu-upgrade-linux-image-4-15-0-1056-kvmubuntu-upgrade-linux-image-4-15-0-1057-raspi2ubuntu-upgrade-linux-image-4-15-0-1058-gcpubuntu-upgrade-linux-image-4-15-0-1063-awsubuntu-upgrade-linux-image-4-15-0-1074-azureubuntu-upgrade-linux-image-4-15-0-1074-snapdragonubuntu-upgrade-linux-image-4-15-0-1075-azureubuntu-upgrade-linux-image-4-15-0-1076-oemubuntu-upgrade-linux-image-4-15-0-91-genericubuntu-upgrade-linux-image-4-15-0-91-generic-lpaeubuntu-upgrade-linux-image-4-15-0-91-lowlatencyubuntu-upgrade-linux-image-5-0-0-1014-oracleubuntu-upgrade-linux-image-5-0-0-1033-gkeubuntu-upgrade-linux-image-5-0-0-1034-gcpubuntu-upgrade-linux-image-5-0-0-1036-azureubuntu-upgrade-linux-image-5-0-0-1047-oem-osp1ubuntu-upgrade-linux-image-5-3-0-1014-oracleubuntu-upgrade-linux-image-5-3-0-1015-kvmubuntu-upgrade-linux-image-5-3-0-1016-awsubuntu-upgrade-linux-image-5-3-0-1017-gcpubuntu-upgrade-linux-image-5-3-0-1019-azureubuntu-upgrade-linux-image-5-3-0-1022-raspi2ubuntu-upgrade-linux-image-5-3-0-46-genericubuntu-upgrade-linux-image-5-3-0-46-generic-lpaeubuntu-upgrade-linux-image-5-3-0-46-lowlatencyubuntu-upgrade-linux-image-5-3-0-46-snapdragonubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-edgeubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-edgeubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-4-15ubuntu-upgrade-linux-image-gke-5-0ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-edgeubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-raspi2-hwe-18-04ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-hwe-18-04 | Mar 17, 2020 | Nov 18, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub