The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Nov 21, 2017 | Nov 18, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Nov 22, 2017 |
| Debian | — | Upgrade linux | Feb 25, 2019 | Nov 22, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 19, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-devel | Dec 8, 2017 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libs | Jan 19, 2018 | Nov 22, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 8, 2017 | Sep 21, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Apr 11, 2018 | Nov 18, 2017 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-source-azure | Mar 29, 2018 | Nov 18, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-116-lowlatencyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1014-awsUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1019-kvmUpgrade linux-image-4.4.0-116-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-4.4.0-1085-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-116-powerpc64-embUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-4.4.0-1087-snapdragonUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-4.4.0-116-powerpc-e500mcUpgrade linux-image-4.4.0-116-generic-lpaeUpgrade linux-image-4.4.0-1052-awsUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-116-powerpc64-smpUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-4.4.0-116-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trusty | Nov 21, 2017 | Nov 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub