A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 4, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Feb 24, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-headersUpgrade kernel | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 5, 2022 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 4, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-default | Mar 3, 2020 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1066-azureUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-aws-edgeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-74-genericUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-snapdragonUpgrade linux-image-oracle-edgeUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gke-5.0Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1066-oemUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-awsUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-virtualUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-5.3.0-1009-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-gcp-edgeUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-5.3.0-26-generic | Jan 8, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub