A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-virtualUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1042-azureUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1038-gcp | Jul 26, 2023 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub