A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-4.14.165-131.185Upgrade kernelUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Apr 27, 2020 | Nov 18, 2019 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2020 | Nov 18, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel | Jun 17, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libs | Apr 16, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade python-perf | Dec 11, 2019 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perf | Feb 26, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 7, 2020 | Nov 21, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docs | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-aws-edgeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-kvmUpgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-gcp-edgeUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-virtualUpgrade linux-image-powerpc64-embUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-oracle-edgeUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-4.15.0-88-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-4.4.0-173-genericUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-genericUpgrade linux-image-5.3.0-1011-awsUpgrade linux-image-azure-edgeUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-1010-kvm | Jan 29, 2020 | Nov 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub