Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to cause a denial of service (memory consumption), aka CID-8572cea1461a.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perfUpgrade python3-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade bpftool | Jan 3, 2020 | Nov 18, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-default | Dec 9, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linuxUpgrade linux-oem-osp1Upgrade linux-awsUpgrade linux-gcpUpgrade linux-hweUpgrade linux-raspi2Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-azureUpgrade linux-gke-5.0 | Nov 19, 2024 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub