A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e62395da2bd.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug | Jun 17, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo | Apr 16, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Dec 11, 2019 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade python-perf | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 12, 2020 | Nov 21, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Dec 28, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.3.0-1019-raspi2Upgrade linux-image-4.15.0-1074-snapdragonUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1058-gcpUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-1013-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-91-genericUpgrade linux-image-5.3.0-1011-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-174-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-4.15.0-91-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1062-awsUpgrade linux-image-5.0.0-1035-azureUpgrade linux-image-4.15.0-1035-oracleUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.3.0-1012-kvmUpgrade linux-image-4.15.0-1074-azureUpgrade linux-image-4.15.0-1056-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-1014-gkeUpgrade linux-image-5.0.0-1027-awsUpgrade linux-image-4.15.0-1055-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.0.0-1032-gkeUpgrade linux-image-4.15.0-1076-oemUpgrade linux-image-5.3.0-42-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-5.3.0-42-lowlatencyUpgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-174-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1057-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-42-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-5.0.0-1033-gcpUpgrade linux-image-5.0.0-1013-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1063-awsUpgrade linux-image-gke-4.15Upgrade linux-image-5.3.0-1014-gcpUpgrade linux-image-4.4.0-174-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-42-generic-lpaeUpgrade linux-image-4.15.0-91-lowlatencyUpgrade linux-image-4.4.0-174-powerpc-e500mcUpgrade linux-image-4.4.0-1129-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-174-powerpc64-embUpgrade linux-image-4.4.0-1133-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.3.0-1016-azureUpgrade linux-image-4.4.0-174-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-174-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1066-kvmUpgrade linux-image-4.15.0-1075-azureUpgrade linux-image-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1043-oem-osp1 | Feb 19, 2020 | Nov 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub