A memory leak in the crypto_reportstat() function in drivers/virt/vboxguest/vboxguest_utils.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering copy_form_user() failures, aka CID-e0b0cb938864.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-source | Feb 26, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default | Feb 4, 2022 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-gke-5.0Upgrade linux-image-5.3.0-24-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-azureUpgrade linux-image-5.3.0-24-genericUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-genericUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-5.3.0-24-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-oracle-edgeUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-oracleUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-gcp-edgeUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-aws-edgeUpgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-5.3.0-1008-kvm | Dec 3, 2019 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub