The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Nov 21, 2017 | Nov 18, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Nov 22, 2017 |
| Debian | — | Upgrade linux | Feb 25, 2019 | Nov 22, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 19, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-headers | Dec 8, 2017 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-libs | Jan 19, 2018 | Nov 22, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 8, 2017 | Sep 21, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Apr 11, 2018 | Nov 18, 2017 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-default | Mar 29, 2018 | Nov 18, 2017 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-116-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-116-lowlatencyUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1085-raspi2Upgrade linux-image-4.4.0-1014-awsUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-4.4.0-1019-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-116-genericUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-4.4.0-1052-awsUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1087-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-116-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-116-generic-lpaeUpgrade linux-image-4.4.0-116-powerpc-e500mcUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-4.4.0-116-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-142-powerpc64-smp | Nov 21, 2017 | Nov 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub