A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_mapping_error() failures, aka CID-1acb8f2a7a9f.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 7, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade perf | Apr 16, 2020 | Nov 7, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perf | Dec 11, 2019 | Nov 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perf | Nov 28, 2019 | Nov 7, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2020 | Oct 7, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 7, 2019 |
| Ubuntu | — | Upgrade linuxUpgrade linux-gke-4.15Upgrade linux-awsUpgrade linux-oemUpgrade linux-lts-xenialUpgrade linux-oem-osp1Upgrade linux-gcpUpgrade linux-aws-hweUpgrade linux-gke-5.0Upgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-hweUpgrade linux-snapdragonUpgrade linux-azure-fipsUpgrade linux-raspi2 | Nov 19, 2024 | Nov 7, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub