drivers/infiniband/ulp/srpt/ib_srpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an ABORT_TASK command to abort a device write operation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 16, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 9, 2016 | Aug 19, 2016 |
| Redhat_linux | — | Upgrade kernel-toolsUpgrade kernel-rt-traceUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-docUpgrade kernel-rt-develUpgrade python-perfUpgrade kernel-rt-trace-develUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-docUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-bootwrapperUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-abi-whitelistsUpgrade kernel-kdump-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-kdumpUpgrade kernel-rt-debug-develUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64 | Nov 4, 2016 | Oct 16, 2016 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-build | Oct 25, 2016 | Oct 16, 2016 |
| Ubuntu | — | Upgrade linux-lts-trustyUpgrade linux-raspi2Upgrade linux-lts-vividUpgrade linux-lts-wilyUpgrade linuxUpgrade linux-snapdragonUpgrade linux-lts-xenial | Nov 19, 2024 | Oct 16, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub