An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | May 7, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 27, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel | Jun 27, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-devel | Mar 12, 2020 | May 7, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 5, 2019 | May 7, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 7, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 31, 2019 | May 7, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-ec2Upgrade kernel-azure-baseUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-default | Aug 7, 2019 | May 7, 2019 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-150-powerpc64-smpUpgrade linux-image-4.4.0-1047-kvmUpgrade linux-image-5.0.0-1013-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1009-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-azureUpgrade linux-image-5.0.0-1007-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1114-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-150-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-5.0.0-16-genericUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-4.4.0-150-powerpc64-embUpgrade linux-image-4.4.0-1110-raspi2Upgrade linux-image-kvmUpgrade linux-image-4.4.0-150-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-60-genericUpgrade linux-image-4.4.0-1084-awsUpgrade linux-image-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.4.0-150-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-oracleUpgrade linux-image-5.0.0-1007-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-16-generic-lpaeUpgrade linux-image-4.4.0-150-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1045-awsUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-150-genericUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-5.0.0-1007-kvmUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-5.0.0-16-lowlatencyUpgrade linux-image-gcp | Jun 5, 2019 | May 7, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub