A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 7, 2019 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-4.14.192-147.314 | Aug 25, 2020 | Nov 7, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 8, 2020 | Nov 7, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Nov 7, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel | Dec 11, 2019 | Nov 7, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-tools-libs | Jan 3, 2020 | Nov 7, 2019 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Nov 7, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 8, 2020 | Nov 7, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-extraUpgrade dlm-kmp-default | Jan 15, 2020 | Nov 7, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1096-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1083-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1087-snapdragonUpgrade linux-image-4.15.0-1097-oemUpgrade linux-image-4.15.0-1084-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-118-lowlatencyUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1075-kvmUpgrade linux-image-4.15.0-1071-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1025-awsUpgrade linux-image-5.4.0-48-genericUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1054-oracleUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1070-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-118-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-118-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-1026-azureUpgrade linux-image-genericUpgrade linux-image-snapdragonUpgrade linux-image-azureUpgrade linux-image-aws-lts-18.04 | Sep 22, 2020 | Nov 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub