A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.165-131.185Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-headers | Apr 27, 2020 | Nov 18, 2019 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2020 | Nov 18, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernelUpgrade perfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perf | Jun 17, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs | Apr 16, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Dec 11, 2019 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perf | Feb 26, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 7, 2020 | Nov 21, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extra | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-173-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.3.0-1013-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-azure-edgeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.0Upgrade linux-image-azureUpgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-5.3.0-1011-awsUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-gcp-edgeUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-oemUpgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1061-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-oracle-edgeUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-aws-edgeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-gcpUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1024-awsUpgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-generic-hwe-16.04 | Jan 29, 2020 | Nov 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub