An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | May 7, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade python-perf | Jun 27, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade python-perf | Jun 27, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-sourceUpgrade python-perf | Mar 12, 2020 | May 7, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 5, 2019 | May 7, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 7, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 31, 2019 | May 7, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-azure-baseUpgrade kernel-ec2-devel | Aug 7, 2019 | May 7, 2019 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-4.4.0-150-powerpc64-smpUpgrade linux-image-5.0.0-1007-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-1047-kvmUpgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1114-snapdragonUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-5.0.0-1013-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1009-raspi2Upgrade linux-image-4.4.0-150-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1007-kvmUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-4.4.0-150-powerpc64-embUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.4.0-1084-awsUpgrade linux-image-5.0.0-1007-gcpUpgrade linux-image-5.0.0-16-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-16-lowlatencyUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-gcpUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1045-awsUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-150-genericUpgrade linux-image-4.4.0-150-powerpc-e500mcUpgrade linux-image-4.4.0-1110-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-150-lowlatencyUpgrade linux-image-5.0.0-16-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-4.4.0-150-generic-lpae | Jun 5, 2019 | May 7, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub