A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.192-147.314Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perf | Aug 25, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debug | Jun 17, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-headers | Apr 16, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headers | Dec 11, 2019 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade python3-perf | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2020 | Sep 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extra | Mar 3, 2020 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1054-oracleUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-oemUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-118-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-4.15.0-1075-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-118-lowlatencyUpgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-4.15.0-1070-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1114-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-118-genericUpgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1084-gcpUpgrade linux-image-4.15.0-1097-oemUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-4.15.0-1096-azureUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-48-genericUpgrade linux-image-raspi2Upgrade linux-image-azure-edgeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-5.4.0-1025-awsUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-1026-azureUpgrade linux-image-snapdragonUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1083-awsUpgrade linux-image-4.15.0-1087-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.15.0-1071-raspi2 | Sep 22, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub