A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.15.0-1038-gke | Jul 26, 2023 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub