First published: Mon Nov 18 2019(Updated: )
A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
debian/linux | 5.10.223-1 5.10.226-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.15-1 | |
Linux kernel | <=5.3.11 | |
Ubuntu | =14.04 | |
Ubuntu | =16.04 | |
Ubuntu | =18.04 | |
Ubuntu | =20.04 | |
Fedora | =30 | |
Fedora | =31 | |
openSUSE | =15.1 | |
NetApp Active IQ Unified Manager for VMware vSphere | ||
NetApp FAS/AFF Baseboard Management Controller | ||
netapp cloud backup | ||
netapp data availability services | ||
NetApp E-Series SANtricity OS Controller | =11.0 | |
NetApp E-Series SANtricity OS Controller | =11.0.0 | |
NetApp E-Series SANtricity OS Controller | =11.20 | |
NetApp E-Series SANtricity OS Controller | =11.25 | |
NetApp E-Series SANtricity OS Controller | =11.30 | |
NetApp E-Series SANtricity OS Controller | =11.30.5r3 | |
NetApp E-Series SANtricity OS Controller | =11.40 | |
NetApp E-Series SANtricity OS Controller | =11.40.3r2 | |
NetApp E-Series SANtricity OS Controller | =11.40.5 | |
NetApp E-Series SANtricity OS Controller | =11.50.1 | |
NetApp E-Series SANtricity OS Controller | =11.50.2 | |
NetApp E-Series SANtricity OS Controller | =11.50.2-p1 | |
NetApp E-Series SANtricity OS Controller | =11.60 | |
NetApp E-Series SANtricity OS Controller | =11.60.0 | |
NetApp E-Series SANtricity OS Controller | =11.60.1 | |
NetApp E-Series SANtricity OS Controller | =11.60.3 | |
NetApp E-Series SANtricity OS Controller | =11.70.1 | |
NetApp E-Series SANtricity OS Controller | =11.70.2 | |
NetApp FAS/AFF Baseboard Management Controller | ||
netapp hci baseboard management controller | =h610s | |
netapp solidfire\, enterprise sds \& hci storage node | ||
netapp solidfire \& hci management node | ||
NetApp SteelStore | ||
Brocade Fabric OS | ||
All of | ||
netapp hci compute node firmware | ||
netapp hci compute node | ||
All of | ||
netapp solidfire baseboard management controller firmware | ||
netapp solidfire baseboard management controller | ||
netapp hci compute node firmware | ||
netapp hci compute node | ||
netapp solidfire baseboard management controller firmware | ||
netapp solidfire baseboard management controller |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-19054 has been classified as having a high severity due to its potential to cause denial of service through memory consumption.
To fix CVE-2019-19054, upgrade to a patched version of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.119-1, or later.
CVE-2019-19054 affects the Linux kernel versions up to 5.3.11 and specific versions of Ubuntu and Fedora.
Exploitation of CVE-2019-19054 may lead to system instability or crashes due to high memory consumption.
A temporary workaround for CVE-2019-19054 could involve limiting the use of the related hardware or disabling the affected drivers.