CVE-2019-19047: Medium severity Linux Linux kernel vulnerability
A memory leak in the mlx5fwfatalreporterdump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5crdumpcollect() failures, aka CID-c7ed6d0183d5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-19047.
What is the title of the vulnerability?
The title of the vulnerability is 'A memory leak in the mlx5_fw_fatal_reporter_dump() function'.
What is the description of the vulnerability?
The vulnerability is a memory leak in the mlx5_fw_fatal_reporter_dump() function in the Linux kernel before 5.3.11, which allows attackers to cause a denial of service (memory consumption).
How can I check if I am affected by this vulnerability?
You can check if you are affected by this vulnerability by verifying if your Linux kernel version is before 5.3.11.
How do I fix CVE-2019-19047?
You can fix CVE-2019-19047 by updating your Linux kernel to version 5.3.11 or higher.