CVE-2019-19081: Medium severity Linux Linux kernel vulnerability
Published Nov 18, 2019
·Updated
A memory leak in the nfpflowerspawnvnicreprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service (memory consumption), aka CID-8ce39eb5a67a.
Affected Software
4 affected components
Linux Linux kernel<5.3.4
openSUSE Leap=15.1
redhat Enterprise Linux=7.0
redhat Enterprise Linux=8.0
Remediation
Event History
Nov 18, 2019
CVE Published
via MITRE·05:24 AM
Data Sourced
via MITRE·05:24 AM
Description
Data Sourced
via NVD·06:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The CVSS vector indicates network access is sufficient, with no privileges or user interaction required. Exploitation has high attack complexity.
2
Which systems should be considered affected?
Linux kernel versions before 5.3.4 are affected. The listed software includes Red Hat Enterprise Linux, Linux kernel, and openSUSE Leap.
3
How can I determine whether a system needs remediation?
Check the running or installed Linux kernel version. Systems using a kernel version earlier than 5.3.4 should be patched using the available vendor update.