CVE-2019-19048: High severity Linux Linux kernel vulnerability
A memory leak in the cryptoreportstat() function in drivers/virt/vboxguest/vboxguestutils.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering copyformuser() failures, aka CID-e0b0cb938864.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19048?
CVE-2019-19048 is classified as a medium severity vulnerability due to its potential for denial of service caused by a memory leak.
How do I fix CVE-2019-19048?
You can mitigate CVE-2019-19048 by upgrading to Linux kernel versions 5.3.9 or later.
What operating systems are affected by CVE-2019-19048?
CVE-2019-19048 affects various Linux kernel versions prior to 5.3.9 and specific distributions like Ubuntu 18.04 and 19.10.
What are the potential impacts of CVE-2019-19048?
Exploiting CVE-2019-19048 can lead to a denial of service by exhausting system memory.
Is there a patch available for CVE-2019-19048?
Yes, patches are included in updated versions of the Linux kernel starting from 5.3.9.