A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering dma_get_sgtable() failures, aka CID-fc739a058d99.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default | Feb 4, 2022 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-5.3.0-24-generic-lpaeUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-1008-kvmUpgrade linux-image-5.3.0-24-lowlatencyUpgrade linux-image-5.3.0-24-genericUpgrade linux-image-snapdragon | Dec 3, 2019 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub