CVE-2019-19069: High severity Linux Linux kernel vulnerability
Published Nov 18, 2019
·Updated
A memory leak in the fastrpcdmabufattach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering dmagetsgtable() failures, aka CID-fc739a058d99.
Affected Software
36 affected componentsFixes available
Linux Linux kernel>=5.1<5.3.9
Linux Linux kernel=5.4-rc1
Linux Linux kernel=5.4-rc2
Linux Linux kernel=5.4-rc3
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=19.10
NetApp Active Iq Unified Manager Vmware Vsphere
NetApp Data Availability Services
NetApp E-Series SANtricity OS Controller>=11.0.0<=11.60.3
NetApp Hci Management Node
NetApp Solidfire
NetApp Steelstore Cloud Integrated Storage
NetApp Hci Compute Node
NetApp Hci Storage Node
Broadcom Fabric Operating System
NetApp Aff A700s Firmware
NetApp AFF A700s
NetApp Fas8300 Firmware
NetApp Fas8300
NetApp Fas8700 Firmware
NetApp Fas8700
NetApp Aff A400 Firmware
NetApp Aff A400
NetApp H610s Firmware
NetApp H610s
All of the following
NetApp Aff A700s Firmware
NetApp AFF A700s
All of the following
NetApp Fas8300 Firmware
NetApp Fas8300
All of the following
NetApp Fas8700 Firmware
NetApp Fas8700
All of the following
NetApp Aff A400 Firmware
NetApp Aff A400
All of the following
NetApp H610s Firmware
NetApp H610s
debian/linux
5.10.223-15.10.262-16.1.176-16.1.180-16.12.94-16.12.101-17.1.7-17.1.8-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.7-1Fixed in 7.1.8-1 - Upgrade
Upgrade
Linux kernel (drivers/misc/fastrpc.c / fastrpc_dma_buf_attach)to a version that resolves this vulnerability.Fixed in 5.3.9Patch CID-fc739a058d99
Event History
Nov 18, 2019
CVE Published
via MITRE·05:24 AM
Data Sourced
via MITRE·05:24 AM
Description
Data Sourced
via NVD·06:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:24 PM
Description
Jul 5, 2026
Data Sourced
via Ubuntu·10:29 AM
RemedyDescriptionSeverityAffected Software
Aug 12, 2026
Data Sourced
via Debian·10:39 AM
DescriptionAffected Software