CVE-2019-19076: Medium severity Linux Linux kernel vulnerability
DISPUTED A memory leak in the nfpabmu32knodereplace() function in drivers/net/ethernet/netronome/nfp/abm/cls.c in the Linux kernel before 5.3.6 allows attackers to cause a denial of service (memory consumption), aka CID-78beef629fd9. NOTE: This has been argued as not a valid vulnerability. The upstream commit 78beef629fd9 was reverted.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19076?
CVE-2019-19076 is considered to potentially cause a denial of service due to memory consumption.
How do I fix CVE-2019-19076?
To mitigate CVE-2019-19076, upgrade to Linux kernel version 5.3.6 or later.
Which Linux distributions are affected by CVE-2019-19076?
CVE-2019-19076 affects Linux kernel versions prior to 5.3.6 across various distributions such as Ubuntu 18.04, Ubuntu 19.04, and Red Hat Enterprise Linux 8.0.
What types of attacks can CVE-2019-19076 enable?
CVE-2019-19076 could allow attackers to exploit a memory leak, potentially leading to service disruptions.
Is CVE-2019-19076 a valid vulnerability?
CVE-2019-19076 has been disputed by some experts who argue it may not be a valid vulnerability.