A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perf | Aug 25, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Jun 17, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-devel | Apr 16, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel | Dec 11, 2019 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2020 | Sep 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-default | Mar 3, 2020 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1083-awsUpgrade linux-image-4.15.0-1071-raspi2Upgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-4.15.0-1084-gcpUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1025-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-48-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1096-azureUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-1087-snapdragonUpgrade linux-image-4.15.0-1097-oemUpgrade linux-image-azure-edgeUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1026-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-118-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-4.15.0-1070-gkeUpgrade linux-image-4.15.0-118-lowlatencyUpgrade linux-image-4.15.0-1054-oracleUpgrade linux-image-4.15.0-1075-kvmUpgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-1114-awsUpgrade linux-image-4.15.0-118-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-gke-4.15 | Sep 22, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub