A memory leak in the nfp_abm_u32_knode_replace() function in drivers/net/ethernet/netronome/nfp/abm/cls.c in the Linux kernel before 5.3.6 allows attackers to cause a denial of service (memory consumption), aka CID-78beef629fd9. NOTE: This has been argued as not a valid vulnerability. The upstream commit 78beef629fd9 was reverted
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-5.0.0-1022-awsUpgrade linux-image-5.0.0-1026-gcpUpgrade linux-image-5.0.0-1026-gkeUpgrade linux-image-awsUpgrade linux-image-5.0.0-1030-oem-osp1Upgrade linux-image-5.0.0-37-lowlatencyUpgrade linux-image-5.0.0-1008-oracleUpgrade linux-image-aws-edgeUpgrade linux-image-gke-5.0Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-edgeUpgrade linux-image-oem-osp1Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-5.0.0-37-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.0.0-1023-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1023-kvmUpgrade linux-image-5.0.0-37-generic | Dec 3, 2019 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub