drivers/infiniband/ulp/srpt/ib_srpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an ABORT_TASK command to abort a device write operation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 16, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 9, 2016 | Aug 19, 2016 |
| Redhat_linux | — | Upgrade kernel-kdump-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-docUpgrade python-perfUpgrade kernel-rt-traceUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-trace-develUpgrade kernel-debuginfo-common-s390xUpgrade perfUpgrade kernel-docUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-bootwrapperUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-kdump-develUpgrade python-perf-debuginfoUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-kdumpUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-abi-whitelists | Nov 4, 2016 | Oct 16, 2016 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-ec2 | Oct 25, 2016 | Oct 16, 2016 |
| Ubuntu | — | Upgrade linuxUpgrade linux-snapdragonUpgrade linux-lts-wilyUpgrade linux-lts-xenialUpgrade linux-lts-trustyUpgrade linux-raspi2Upgrade linux-lts-vivid | Nov 19, 2024 | Oct 16, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub