CVE-2019-19059: Medium severity Linux Linux kernel vulnerability
A flaw was found in the way the Intel Wireless driver in the Linux kernel handled resource cleanup during Gen 3 device initialization. This flaw allows an attacker with the ability to restrict access to DMA coherent memory on device initialization, to crash the system.
Other sources
Multiple memory leaks in the iwlpciectxtinfogen3init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwlpcieinitfwsec() or dmaalloccoherent() failures, aka CID-0f4f199443fa.
— Ubuntu
Multiple memory leaks in the iwlpciectxtinfogen3init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwlpcieinitfwsec() or dmaalloccoherent() failures.
Upstream Issue:
https://github.com/torvalds/linux/commit/0f4f199443faca715523b0659aa536251d8b978f
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.0-1160.rt56.1131.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-1160.el7 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-193.rt13.51.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-193.el8 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 0f4f199443faca715523b0659aa536251d8b978f - Configuration
Blacklist the iwlwifi kernel module to prevent the affected code from being loaded.
Linux kernel module iwlwifi module blacklist = blacklisted
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2019-19059?
CVE-2019-19059 has a critical severity rating due to its potential to cause system crashes during device initialization.
How do I fix CVE-2019-19059?
To address CVE-2019-19059, update your kernel to the remedied versions specified for your distribution.
Who is affected by CVE-2019-19059?
CVE-2019-19059 affects users of specific Linux kernel versions in Red Hat, Fedora, and Ubuntu distributions.
What types of systems are vulnerable to CVE-2019-19059?
Systems running impacted versions of the Linux kernel, especially those with Intel Wireless drivers, are vulnerable to CVE-2019-19059.
Can CVE-2019-19059 be exploited remotely?
CVE-2019-19059 requires local access to exploit, as an attacker must restrict access to DMA coherent memory.