A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures, aka CID-6402939ec86e.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel | Jan 3, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-default | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-aws-edgeUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1069-snapdragonUpgrade linux-image-4.15.0-1051-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-5.3.0-24-generic-lpaeUpgrade linux-image-4.15.0-1056-awsUpgrade linux-image-5.3.0-1008-kvmUpgrade linux-image-4.15.0-1052-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-oracleUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-5.3.0-24-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-4.15.0-1065-oemUpgrade linux-image-oracle-edgeUpgrade linux-image-awsUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-raspi2Upgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-72-genericUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-4.15.0-1050-gcpUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-4.15.0-1049-gkeUpgrade linux-image-genericUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-4.15.0-72-lowlatencyUpgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-24-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1030-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-edgeUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-4.15.0-72-generic-lpaeUpgrade linux-image-5.0.0-1009-oracle | Dec 3, 2019 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub