A memory leak in the nfp_abm_u32_knode_replace() function in drivers/net/ethernet/netronome/nfp/abm/cls.c in the Linux kernel before 5.3.6 allows attackers to cause a denial of service (memory consumption), aka CID-78beef629fd9. NOTE: This has been argued as not a valid vulnerability. The upstream commit 78beef629fd9 was reverted
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1026-gkeUpgrade linux-image-5.0.0-1022-awsUpgrade linux-image-5.0.0-1008-oracleUpgrade linux-image-aws-edgeUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-1030-oem-osp1Upgrade linux-image-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-37-lowlatencyUpgrade linux-image-5.0.0-1026-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-edgeUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1023-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-37-genericUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1023-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-37-generic-lpae | Dec 3, 2019 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub