CVE-2019-15090: Medium severity linux kernel vulnerability
An issue was discovered in drivers/scsi/qedi/qedidbg.c in the Linux kernel before 5.1.12. In the qedidbg family of functions, there is an out-of-bounds read.
Other sources
An out of bounds (OOB) memory access flaw was found in the Linux kernel's qedidbg family of functions in drivers/scsi/qedi/qedidbg.c in Qlogic ISCSI Subsystem. This could allow a local attacker with a special user privilege account (or a root) to crash the system or leak kernel internal information.
Upstream Fix:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c09581a52765a85f19fc35340127396d5e3379cc
— Red Hat
An out-of-bounds (OOB) memory access flaw was found in the Qlogic ISCSI module in the Linux kernel's qedidbg family of functions in drivers/scsi/qedi/qedidbg.c. Here a local attacker with a special user privilege account (or a root) can cause an out-of-bound memory access leading to a system crash or a leak of internal kernel information.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2019-15090?
CVE-2019-15090 is classified as a medium severity vulnerability due to its potential impact on system stability and data integrity.
How do I fix CVE-2019-15090?
To fix CVE-2019-15090, update your kernel to version 5.1.12 or later for affected Linux distributions.
Which Linux versions are affected by CVE-2019-15090?
CVE-2019-15090 affects Linux kernel versions prior to 5.1.12 and specific versions of Red Hat, Ubuntu, and openSUSE.
Is there a workaround for CVE-2019-15090 if I cannot update?
Currently, there is no known workaround for CVE-2019-15090, so updating the kernel is recommended.
What type of vulnerability is CVE-2019-15090?
CVE-2019-15090 is an out-of-bounds read vulnerability in the Linux kernel's qedi_dbg_* family of functions.