CVE-2019-19043
First published: Mon Nov 18 2019(Updated: )
A memory leak in the i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering i40e_setup_channel() failures, aka CID-27d461333459.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux kernel | <=5.3.11 | |
| Ubuntu Linux | =18.04 | |
| Ubuntu Linux | =19.10 | |
| Fedora | =30 | |
| Fedora | =31 | |
| Linux Kernel | <=5.3.11 | |
| Ubuntu | =18.04 | |
| Ubuntu | =19.10 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.17-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/torvalds/linux/commit/27d461333459d282ffa4a2bdb6b215a59d493a8f
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/
- https://security.netapp.com/advisory/ntap-20191205-0001/
- https://usn.ubuntu.com/4300-1/
- https://launchpad.net/bugs/cve/CVE-2019-19043
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/
- https://security-tracker.debian.org/tracker/CVE-2019-19043
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19043
- https://nvd.nist.gov/vuln/detail/CVE-2019-19043
- https://ubuntu.com/security/CVE-2019-19043
Frequently Asked Questions
What is the vulnerability ID for this memory leak in the i40e_setup_macvlans() function?
The vulnerability ID for this memory leak is CVE-2019-19043.
How does this vulnerability impact the Linux kernel?
This vulnerability allows attackers to cause a denial of service by triggering i40e_setup_channel() failures, resulting in memory consumption.
Which version of the Linux kernel is affected by this vulnerability?
The Linux kernel through version 5.3.11 is affected by this vulnerability.
What is the severity of CVE-2019-19043?
The severity of CVE-2019-19043 is not specified.
Are there any patches or updates available to fix this vulnerability?
Yes, patches or updates are available to fix this vulnerability. Please refer to the provided references for more information.
- agent/type
- collector/launchpad-cve
- source/Launchpad
- agent/severity
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/remedy
- agent/first-publish-date
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/trending
- agent/last-modified-date
- agent/source
- agent/event
- agent/author
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-cve
- source/NVD
- package-manager/debian
- vendor/linux
- canonical/linux kernel
- version/linux kernel/5.3.11
- vendor/canonical
- canonical/ubuntu linux
- version/ubuntu linux/18.04
- version/ubuntu linux/19.10
- vendor/fedoraproject
- canonical/fedora
- version/fedora/30
- version/fedora/31
- canonical/ubuntu
- version/ubuntu/18.04
- version/ubuntu/19.10