A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 4, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 24, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-headers | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 5, 2022 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 4, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | Mar 3, 2020 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-awsUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-gke-5.0Upgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-1028-azureUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-azure-edgeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-gkeUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-genericUpgrade linux-image-aws-edgeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1009-awsUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-oracle-edgeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-hwe | Jan 8, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub