CVE-2019-19071: High severity Linux Linux kernel vulnerability
A memory leak in the rsisendbeacon() function in drivers/net/wireless/rsi/rsi91xmgmt.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering rsipreparebeacon() failures, aka CID-d563131ef23c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1 - Upgrade
Upgrade
Linux kernel (drivers/net/wireless/rsi/rsi_91x_mgmt.c, rsi_send_beacon)to a version that resolves this vulnerability.Fixed in 5.3.11Patch CID-d563131ef23c
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19071?
CVE-2019-19071 is classified as a high severity vulnerability due to its potential to cause denial of service through memory consumption.
How do I fix CVE-2019-19071?
To mitigate CVE-2019-19071, update the Linux kernel to version 5.10.223-1 or later.
Which Linux kernel versions are affected by CVE-2019-19071?
CVE-2019-19071 affects Linux kernel versions from 4.14 up to 5.3.11.
What causes CVE-2019-19071?
CVE-2019-19071 is caused by a memory leak in the rsi_send_beacon() function due to rsi_prepare_beacon() failures.
Is CVE-2019-19071 specific to any particular Linux distribution?
CVE-2019-19071 affects multiple distributions, including Ubuntu versions 14.04, 16.04, 18.04, and 19.10.