A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-headersUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python3-perf | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 12, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-build | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.4.0-1100-awsUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-1009-azureUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-171-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-oracle-edgeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1131-snapdragonUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-4.4.0-171-lowlatencyUpgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-171-powerpc-smpUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-171-powerpc64-embUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-171-generic-lpaeUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-4.4.0-1127-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-gcp-edgeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-5.0.0-1033-oem-osp1 | Jan 8, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub