The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Nov 21, 2017 | Nov 18, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Nov 22, 2017 |
| Debian | — | Upgrade linux | Feb 25, 2019 | Nov 22, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 19, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perf | Dec 8, 2017 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfo | Jan 19, 2018 | Nov 22, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 8, 2017 | Sep 21, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Apr 11, 2018 | Nov 18, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-azure-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-ec2Upgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-default | Mar 29, 2018 | Nov 18, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-116-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-1019-kvmUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-4.4.0-116-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1014-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-116-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1085-raspi2Upgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-4.4.0-116-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-4.4.0-1052-awsUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.4.0-116-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1087-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-116-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-116-powerpc-smp | Nov 21, 2017 | Nov 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub