CVE-2019-19064: High severity Linux Linux kernel vulnerability
DISPUTED A memory leak in the fsllpspiprobe() function in drivers/spi/spi-fsl-lpspi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering pmruntimegetsync() failures, aka CID-057b8945f78f. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control these failures at probe time.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1
Event History
Frequently Asked Questions
What is the vulnerability ID for this memory leak vulnerability?
The vulnerability ID for this memory leak vulnerability is CVE-2019-19064.
What is the severity of CVE-2019-19064?
The severity of CVE-2019-19064 is not specified in the available information.
How does the memory leak vulnerability in fsl_lpspi_probe() function impact the system?
The memory leak vulnerability in fsl_lpspi_probe() function can cause a denial of service by consuming excessive memory.
Are there any known exploits for CVE-2019-19064?
There are no known exploits for CVE-2019-19064 according to the available information.
How can I fix the memory leak vulnerability in fsl_lpspi_probe() function?
To fix the memory leak vulnerability, update the Linux kernel to version 5.5 or higher.