A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures, aka CID-6402939ec86e.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-sourceUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel | Jan 3, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-default | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-5.3.0-24-genericUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1052-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-5.3.0-24-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-edgeUpgrade linux-image-4.15.0-1056-awsUpgrade linux-image-snapdragonUpgrade linux-image-gke-5.0Upgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-aws-edgeUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1069-snapdragonUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1065-oemUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1051-kvmUpgrade linux-image-5.3.0-1008-kvmUpgrade linux-image-awsUpgrade linux-image-gcp-edgeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-24-lowlatencyUpgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-72-genericUpgrade linux-image-azureUpgrade linux-image-4.15.0-72-generic-lpaeUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-4.15.0-1049-gkeUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-4.15.0-1030-oracleUpgrade linux-image-oemUpgrade linux-image-4.15.0-72-lowlatencyUpgrade linux-image-4.15.0-1050-gcpUpgrade linux-image-5.0.0-38-lowlatency | Dec 3, 2019 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub