A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-96c5c6e6a5b6.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 18, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 5, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-sourceUpgrade perfUpgrade python3-perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade bpftool | Jan 3, 2020 | Nov 18, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Nov 21, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Nov 18, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default | Feb 4, 2022 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-oracle-edgeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-gcpUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-azure-edgeUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-genericUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-gcp-edgeUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-5.3.0-1009-azureUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-aws-edgeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-oracleUpgrade linux-image-5.3.0-1009-aws | Jan 8, 2020 | Nov 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub