CVE-2019-19066: Medium severity Linux Linux kernel vulnerability
A memory leak in the bfadimgetstats() function in drivers/scsi/bfa/bfadattr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfaportgetstats() failures, aka CID-0e62395da2bd.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19066?
CVE-2019-19066 is classified as a denial of service vulnerability due to memory leak issues.
How do I fix CVE-2019-19066?
To mitigate CVE-2019-19066, upgrade to Linux kernel versions 5.10.223-1, 5.10.226-1, or later.
Which systems are affected by CVE-2019-19066?
CVE-2019-19066 affects various systems running Linux kernel up to version 5.3.11, including specific versions of Ubuntu, Debian, Fedora, and Red Hat.
What causes the memory leak in CVE-2019-19066?
The memory leak in CVE-2019-19066 is caused by failures in the bfad_im_get_stats() function during bfa_port_get_stats() executions.
Can CVE-2019-19066 be exploited remotely?
Yes, CVE-2019-19066 can potentially be exploited remotely, leading to denial of service through excessive memory consumption.