A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-intelUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1042-azureUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-78-genericUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1034-raspi-nolpae | Jul 26, 2023 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub