drivers/scsi/libsas/sas_scsi_host.c in the Linux kernel before 4.16 allows local users to cause a denial of service (ata qc leak) by triggering certain failure conditions. NOTE: a third party disputes the relevance of this report because the failure can only occur for physically proximate attackers who unplug SAS Host Bus Adapter cables
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 19, 2019 | Apr 11, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel | May 29, 2018 | Apr 11, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade perf | Feb 26, 2019 | Apr 11, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Jul 3, 2018 | Apr 11, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 5, 2018 | Mar 8, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 11, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1095-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-130-powerpc-e500mcUpgrade linux-image-4.4.0-1024-awsUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-23-lowlatencyUpgrade linux-image-4.15.0-1012-raspi2Upgrade linux-image-4.15.0-23-generic-lpaeUpgrade linux-image-4.15.0-23-genericUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-4.15.0-23-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-130-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.4.0-130-powerpc-smpUpgrade linux-image-4.4.0-1029-kvmUpgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1009-gcpUpgrade linux-image-4.4.0-1092-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.4.0-130-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-4.15.0-1011-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-130-genericUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-130-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1010-awsUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-4.4.0-130-powerpc64-smpUpgrade linux-image-4.15.0-1013-azure | Jun 16, 2018 | Apr 11, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub