Vulnerability identifier: #VU93774
Vulnerability risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID:
CWE-ID:
CWE-399
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to resource management error within the mtk_ppe_start() and mtk_ppe_stop() functions in drivers/net/ethernet/mediatek/mtk_ppe.c. A local user can perform a denial of service (DoS) attack.
Mitigation
Install update from vendor's website.
Vulnerable software versions
Linux kernel:
External links
http://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6
http://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27
http://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633
http://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369
http://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f
http://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.