A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy to udata failures, aka CID-4a9d46a9fe14.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 4, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade python-perf | Jan 3, 2020 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 4, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | Dec 13, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-azure-edgeUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-oracle-edgeUpgrade linux-image-genericUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-gke-5.0Upgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-40-genericUpgrade linux-image-awsUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-5.3.0-1011-awsUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-raspi2-hwe-18.04 | Jan 29, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub