#VU89984 Memory leak in Linux kernel
Vulnerability identifier: #VU89984
Vulnerability risk: Low
CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID:
CWE-ID:
CWE-401
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the mlxsw_sp_acl_tcam_vchunk_migrate_start() and mlxsw_sp_acl_tcam_vregion_migrate() functions in drivers/net/ethernet/mellanox/mlxsw/spectrum_acl_tcam.c. A local user can perform a denial of service (DoS) attack.
Mitigation
Install update from vendor's website.
Vulnerable software versions
Linux kernel:
External links
http://git.kernel.org/stable/c/c6f3fa7f5a748bf6e5c4eb742686d6952f854e76
http://git.kernel.org/stable/c/617e98ba4c50f4547c9eb0946b1cfc26937d70d1
http://git.kernel.org/stable/c/413a01886c3958d4b8aac23a3bff3d430b92093e
http://git.kernel.org/stable/c/b822644fd90992ee362c5e0c8d2556efc8856c76
http://git.kernel.org/stable/c/0ae8ff7b6d42e33943af462910bdcfa2ec0cb8cf
http://git.kernel.org/stable/c/b3fd51f684a0711504f82de510da109ae639722d
http://git.kernel.org/stable/c/8ca3f7a7b61393804c46f170743c3b839df13977
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
