An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | May 7, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfo | Jun 27, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Jun 27, 2019 | May 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Mar 12, 2020 | May 7, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 5, 2019 | May 7, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 7, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 31, 2019 | May 7, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-azure-base | Aug 7, 2019 | May 7, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1007-gcpUpgrade linux-image-4.4.0-150-generic-lpaeUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-16-lowlatencyUpgrade linux-image-4.4.0-150-genericUpgrade linux-image-4.4.0-1110-raspi2Upgrade linux-image-raspi2Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.4.0-1084-awsUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1007-kvmUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-150-powerpc64-embUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-150-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-150-powerpc-e500mcUpgrade linux-image-5.0.0-16-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1045-awsUpgrade linux-image-5.0.0-16-genericUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-aws-hweUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-150-powerpc64-smpUpgrade linux-image-5.0.0-1013-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-4.4.0-1047-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1007-awsUpgrade linux-image-5.0.0-1009-raspi2Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-gkeUpgrade linux-image-4.4.0-150-powerpc-smpUpgrade linux-image-4.4.0-1114-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-azure | Jun 5, 2019 | May 7, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub