A memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_crdump_collect() failures, aka CID-c7ed6d0183d5.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 4, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 4, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default | Feb 4, 2022 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-virtualUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-gkeUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-generic | Jan 8, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub