Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Mar 8, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Mar 8, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | Mar 8, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perf | May 2, 2018 | Mar 8, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perf | Feb 26, 2019 | Mar 8, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 6, 2018 | Mar 8, 2018 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Oct 31, 2018 | Mar 8, 2018 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2Upgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-extra | Apr 26, 2018 | Mar 8, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-4.13.0-1023-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-127-generic-lpaeUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-4.13.0-1031-oemUpgrade linux-image-4.4.0-127-genericUpgrade linux-image-4.4.0-127-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1090-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.13.0-46-lowlatencyUpgrade linux-image-4.4.0-127-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1093-snapdragonUpgrade linux-image-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-127-powerpc-e500mcUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-4.4.0-127-powerpc64-embUpgrade linux-image-4.13.0-46-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1022-awsUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-4.4.0-127-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.13.0-46-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1026-kvm | May 29, 2018 | Mar 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 8, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub