Description
Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.4.6-1 | — |
| Debian 13 | linux | 5.4.6-1 | — |
| Debian 12 | linux | 5.4.6-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv +2 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +5 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-aws-5.0 | 5.0.0-1027.30 | USN-4301-1 |
| Ubuntu 18.04 LTS | linux-azure | 5.0.0-1035.37 | USN-4301-1 |
| Ubuntu 18.04 LTS | linux-azure-5.3 | 5.3.0-1016.17~18.04.1 | USN-4300-1 |
| Ubuntu 18.04 LTS | linux-gcp | 5.0.0-1033.34 | USN-4301-1 |
| Ubuntu 18.04 LTS | linux-gcp-5.3 +1 | 5.3.0-1014.15~18.04.1 | USN-4300-1 |
| Ubuntu 18.04 LTS | linux-gcp-edge +2 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gke-5.0 | 5.0.0-1032.33 | USN-4301-1 |
| Ubuntu 18.04 LTS | linux-hwe | 5.3.0-42.34~18.04.1 | USN-4300-1 |
| Ubuntu 18.04 LTS | linux-oem-osp1 | 5.0.0-1043.48 | USN-4301-1 |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | 5.0.0-1013.18 | USN-4301-1 |
| Ubuntu 18.04 LTS | linux-raspi2-5.3 | 5.3.0-1019.21~18.04.1 | USN-4300-1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | kernel-rt +12 | 4.18.0-193.rt13.51.el8 | RHSA-2020:1567 |
| RHEL 8 | perf +26 | 4.18.0-193.el8 | RHSA-2020:1769 |
| RHEL 7 | kernel-rt +10 | 3.10.0-1160.rt56.1131.el7 | RHSA-2020:4062 |
| RHEL 7 | perf +18 | 3.10.0-1160.el7 | RHSA-2020:4060 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | perf +12 | 3.10.0-1160.el7 | ELSA-2020-4060 |
Advisories 8
- RHSA-2020:4062 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:4060 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:1769 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 22, 2026
- RHSA-2020:1567 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- USN-4301-1 linux-aws-5.0, linux-gcp, linux-gke-5.0, linux-oracle-5.0, linux-azure vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- USN-4300-1 linux, linux-aws, linux-gcp, linux-gcp-5.3, linux-gke-5.3, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-raspi2-5.3, linux-azure, linux-azure-5.3 vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- WID-SEC-2023-0198 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Dec 9, 2025
- ELSA-2020-4060 Important: kernel security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 6, 2020
References
- https://github.com/torvalds/linux/commit/0f4f199443faca715523b0659aa536251d8b978f
- FEDORA-2019-021c968423 vendor-advisory
- FEDORA-2019-34a75d7e61 vendor-advisory
- https://security.netapp.com/advisory/ntap-20191205-0001/
- USN-4300-1 vendor-advisory
- USN-4301-1 vendor-advisory