A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering dma_get_sgtable() failures, aka CID-fc739a058d99.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default | Feb 4, 2022 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-5.3.0-1008-kvmUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-5.3.0-24-generic-lpaeUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-24-lowlatencyUpgrade linux-image-5.3.0-24-generic | Dec 3, 2019 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub