Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Mar 8, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Mar 8, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | Mar 8, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-devel | May 2, 2018 | Mar 8, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Feb 26, 2019 | Mar 8, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 6, 2018 | Mar 8, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 31, 2018 | Mar 8, 2018 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade cluster-network-kmp-default | Apr 26, 2018 | Mar 8, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-127-genericUpgrade linux-image-4.13.0-1031-oemUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-4.13.0-1023-raspi2Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-1090-raspi2Upgrade linux-image-awsUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-4.4.0-127-powerpc64-smpUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-4.4.0-127-generic-lpaeUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-127-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-4.13.0-46-lowlatencyUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-127-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-4.4.0-1026-kvmUpgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-127-lowlatencyUpgrade linux-image-4.13.0-46-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-1022-awsUpgrade linux-image-4.13.0-46-generic-lpaeUpgrade linux-image-4.4.0-1093-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-127-powerpc64-emb | May 29, 2018 | Mar 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub