The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Nov 21, 2017 | Nov 18, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Nov 22, 2017 |
| Debian | — | Upgrade linux | Feb 25, 2019 | Nov 22, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 19, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade python-perf | Dec 8, 2017 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-headers | Jan 19, 2018 | Nov 22, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 8, 2017 | Sep 21, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Apr 11, 2018 | Nov 18, 2017 |
| Suse | — | Upgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extra | Mar 29, 2018 | Nov 18, 2017 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-116-lowlatencyUpgrade linux-image-4.4.0-116-genericUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1019-kvmUpgrade linux-image-4.4.0-1085-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-116-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-3.13.0-142-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1014-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-4.4.0-116-powerpc64-smpUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-4.4.0-1087-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-4.4.0-116-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-4.4.0-116-powerpc-e500mcUpgrade linux-image-4.4.0-1052-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-116-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-142-generic-lpae | Nov 21, 2017 | Nov 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub