A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 4, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headers | Feb 24, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-sourceUpgrade python-perfUpgrade python3-perf | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 5, 2022 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 4, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-default | Mar 3, 2020 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.3.0-1009-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-awsUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-gke-5.0Upgrade linux-image-azure-edgeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-genericUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-gkeUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-aws-edgeUpgrade linux-image-oracleUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-oracle-edgeUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1052-kvm | Jan 8, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub