A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 4, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perf | Feb 24, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-sourceUpgrade kernelUpgrade kernel-headers | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 5, 2022 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 4, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-default | Mar 3, 2020 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1023-awsUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-aws-edgeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-oracle-edgeUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1066-azureUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-genericUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcp-edgeUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-gke-5.0Upgrade linux-image-5.3.0-26-genericUpgrade linux-image-oem-osp1Upgrade linux-image-gcpUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-4.15.0-74-lowlatency | Jan 8, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub