An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA function) from a stack variable. This could allow an attacker to trigger a Denial of Service, exploitable if this driver is used on an architecture for which this stack/DMA interaction has security relevance.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 24, 2020 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-debug | Dec 4, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Dec 18, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-tools | Dec 11, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-sourceUpgrade kernel-devel | Nov 28, 2019 | Oct 1, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 12, 2020 | Oct 1, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1051-kvmUpgrade linux-image-5.3.0-24-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.15.0-1049-gkeUpgrade linux-image-4.15.0-1052-raspi2Upgrade linux-image-4.15.0-1030-oracleUpgrade linux-image-4.4.0-170-lowlatencyUpgrade linux-image-5.3.0-24-generic-lpaeUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.3.0-24-genericUpgrade linux-image-4.15.0-1050-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-edgeUpgrade linux-image-4.4.0-1126-raspi2Upgrade linux-image-azureUpgrade linux-image-4.4.0-1063-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-4.4.0-1059-awsUpgrade linux-image-4.15.0-72-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-aws-edgeUpgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-gke-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-72-genericUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-4.15.0-72-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-4.4.0-170-powerpc-e500mcUpgrade linux-image-aws-hweUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-170-powerpc64-smpUpgrade linux-image-4.4.0-1099-awsUpgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-170-powerpc-smpUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-gke-5.0Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-4.4.0-170-generic-lpaeUpgrade linux-image-4.15.0-1056-awsUpgrade linux-image-gkeUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-170-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-4.4.0-1130-snapdragonUpgrade linux-image-4.4.0-170-genericUpgrade linux-image-5.3.0-1008-kvmUpgrade linux-image-4.15.0-1065-oemUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-edgeUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1069-snapdragonUpgrade linux-image-powerpc-smp-lts-xenial | Dec 3, 2019 | Oct 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub