CVE-2019-20810: Medium severity Linux Linux kernel vulnerability
go7007sndinit in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call sndcardfree for a failure path, which causes a memory leak, aka CID-9453264ef586.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 7.1.13-1Fixed in 7.2.6-1 - Upgrade
Upgrade
Linux kernel (drivers/media/usb/go7007/snd-go7007.c: go7007_snd_init)to a version that resolves this vulnerability.Fixed in 5.6Patch CID-9453264ef586
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20810?
CVE-2019-20810 is classified as a medium severity issue due to the potential memory leak in affected Linux kernel versions.
How do I fix CVE-2019-20810?
To mitigate CVE-2019-20810, you should upgrade your Linux kernel to version 5.6 or later.
Which Linux distributions are affected by CVE-2019-20810?
CVE-2019-20810 affects the Linux kernel prior to version 5.6, including specific versions of openSUSE and Ubuntu.
What is the impact of CVE-2019-20810?
The impact of CVE-2019-20810 is a memory leak that could lead to reduced system performance over time.
Is CVE-2019-20810 exploitable from remote?
CVE-2019-20810 is not directly exploitable from remote; it requires local access to the affected system.