A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-livepatch-4.14.192-147.314Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-devel | Aug 25, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-devel | Jun 17, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-tools-libs | Apr 16, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade perf | Dec 11, 2019 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade python-perfUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headers | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2020 | Sep 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-default | Mar 3, 2020 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-48-genericUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1097-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-4.15.0-1087-snapdragonUpgrade linux-image-5.4.0-1025-awsUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1096-azureUpgrade linux-image-4.15.0-1083-awsUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1084-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1071-raspi2Upgrade linux-image-5.4.0-1026-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-4.15.0-118-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1070-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1075-kvmUpgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1054-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-118-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-118-generic-lpae | Sep 22, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub