A memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_crdump_collect() failures, aka CID-c7ed6d0183d5.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 4, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 4, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default | Feb 4, 2022 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-snapdragonUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-kvmUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-gcpUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-azureUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-oracleUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-lowlatency | Jan 8, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub