drivers/scsi/libsas/sas_scsi_host.c in the Linux kernel before 4.16 allows local users to cause a denial of service (ata qc leak) by triggering certain failure conditions. NOTE: a third party disputes the relevance of this report because the failure can only occur for physically proximate attackers who unplug SAS Host Bus Adapter cables
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 19, 2019 | Apr 11, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-tools | May 29, 2018 | Apr 11, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debug | Feb 26, 2019 | Apr 11, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Jul 3, 2018 | Apr 11, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 5, 2018 | Mar 8, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 11, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-130-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-130-powerpc64-embUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1010-awsUpgrade linux-image-awsUpgrade linux-image-4.15.0-1013-azureUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-4.15.0-1011-kvmUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-4.15.0-1009-gcpUpgrade linux-image-4.4.0-130-powerpc-smpUpgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-23-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1012-raspi2Upgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-4.15.0-23-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-23-snapdragonUpgrade linux-image-4.4.0-1024-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-4.15.0-23-lowlatencyUpgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-azure | Jun 16, 2018 | Apr 11, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub