A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because unittest.c can only be reached during boot
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-source | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 11, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-build | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-lts-xenialUpgrade linux-azure-fipsUpgrade linux-awsUpgrade linux-azure | Nov 19, 2024 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub