A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 4, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade perf | Feb 24, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-sourceUpgrade python3-perfUpgrade python-perfUpgrade kernel-develUpgrade perf | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 5, 2022 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 4, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | Mar 3, 2020 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-awsUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-virtualUpgrade linux-image-azure-edgeUpgrade linux-image-gcpUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-gke-5.0Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1066-oemUpgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-4.15.0-1057-awsUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-raspi2Upgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oracle-edgeUpgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-genericUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-4.15.0-1066-azure | Jan 8, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub