A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.192-147.314Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfo | Aug 25, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Jun 17, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-headers | Apr 16, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headers | Dec 11, 2019 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-sourceUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-devel | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2020 | Sep 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade cluster-md-kmp-default | Mar 3, 2020 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1026-azureUpgrade linux-image-4.15.0-1083-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1096-azureUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1025-awsUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1084-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-5.4.0-48-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-4.15.0-1097-oemUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-4.15.0-1075-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1070-gkeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-118-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-oemUpgrade linux-image-4.15.0-1054-oracleUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-4.15.0-118-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-118-generic | Sep 22, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub