A memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_crdump_collect() failures, aka CID-c7ed6d0183d5.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 4, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 4, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default | Feb 4, 2022 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-kvmUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-5.3.0-1009-awsUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-26-genericUpgrade linux-image-awsUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-gcp-edgeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-26-generic-lpae | Jan 8, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub