A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service (memory consumption), aka CID-8ce39eb5a67a.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 18, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-sourceUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade python3-perf | Jan 3, 2020 | Nov 18, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 18, 2019 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Dec 7, 2019 | Nov 18, 2019 |
| Ubuntu | — | Upgrade linux-oem-osp1Upgrade linux-gcpUpgrade linux-hweUpgrade linux-awsUpgrade linux-gke-5.0Upgrade linux-kvmUpgrade linux-azureUpgrade linux-oracleUpgrade linux-raspi2Upgrade linux | Nov 19, 2024 | Nov 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub