A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy to udata failures, aka CID-4a9d46a9fe14.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 4, 2020 | Nov 18, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-tools | Jan 3, 2020 | Nov 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 18, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 4, 2020 | Nov 18, 2019 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extra | Dec 13, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-image-oracle-edgeUpgrade linux-image-gkeUpgrade linux-image-gcp-edgeUpgrade linux-image-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-kvmUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-5.0.0-1024-awsUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-5.3.0-1011-awsUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-aws-edgeUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1029-gcp | Jan 29, 2020 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub