A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.165-131.185Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Apr 27, 2020 | Nov 18, 2019 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2020 | Nov 18, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 8, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-devel | Jun 17, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade perf | Apr 16, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Dec 11, 2019 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-sourceUpgrade bpftool | Feb 26, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 7, 2020 | Nov 21, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 8, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-azure-edgeUpgrade linux-image-gke-5.0Upgrade linux-image-5.3.0-1011-awsUpgrade linux-image-4.4.0-173-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-aws-hweUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-azureUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1060-awsUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-kvmUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-aws-edgeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-oracle-edgeUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-edgeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.0.0-1024-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1061-awsUpgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-gkeUpgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenial | Jan 29, 2020 | Nov 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub