drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jul 29, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Jul 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade python-perfUpgrade kernel-headersUpgrade perf | Feb 26, 2019 | Jul 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Apr 30, 2021 | Jul 29, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 25, 2018 | Jun 1, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Apr 24, 2019 | Jul 29, 2018 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-livepatch-4_12_14-23-defaultUpgrade kernel-ec2Upgrade dpdk-thunderx-develUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-azureUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade dpdk-develUpgrade kernel-livepatch-4_12_14-25_3-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-devel | Aug 15, 2018 | Jul 29, 2018 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1032-awsUpgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-3.13.0-164-genericUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-4.4.0-1070-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1036-azureUpgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-genericUpgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-4.4.0-138-genericUpgrade linux-image-azureUpgrade linux-image-4.4.0-138-powerpc-e500mc | Oct 31, 2018 | Jul 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub