A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-intelUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1040-awsUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k | Jul 26, 2023 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub