A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1042-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-awsUpgrade linux-image-intelUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracleUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-gcpUpgrade linux-image-5.15.0-78-lowlatency-64k | Jul 26, 2023 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub