An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | May 7, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-devel | Jun 27, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Jun 27, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-sourceUpgrade bpftoolUpgrade python-perfUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headers | Mar 12, 2020 | May 7, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 5, 2019 | May 7, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 7, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 31, 2019 | May 7, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-azure-base | Aug 7, 2019 | May 7, 2019 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1009-raspi2Upgrade linux-image-azureUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-150-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.4.0-1047-kvmUpgrade linux-image-5.0.0-1007-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-1013-snapdragonUpgrade linux-image-4.4.0-150-powerpc64-smpUpgrade linux-image-4.4.0-1114-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.0.0-16-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-awsUpgrade linux-image-5.0.0-1007-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-150-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1084-awsUpgrade linux-image-4.4.0-150-genericUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-4.4.0-150-powerpc64-embUpgrade linux-image-4.4.0-1110-raspi2Upgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.4.0-150-lowlatencyUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-5.0.0-16-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-150-powerpc-e500mcUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-16-lowlatencyUpgrade linux-image-5.0.0-1007-kvmUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1045-awsUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-aws-hweUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenial | Jun 5, 2019 | May 7, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 7, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub