CVE-2019-20810: Medium severity Linux Linux kernel vulnerability
go7007sndinit in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call sndcardfree for a failure path, which causes a memory leak, aka CID-9453264ef586.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Compensating control
Upgrade the Linux kernel to version 5.6 or later to include the fix for CID-9453264ef586 (go7007_snd_init memory leak where snd_card_free is not called on a failure path before 5.6).
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20810?
CVE-2019-20810 is classified as a medium severity issue due to the potential memory leak in affected Linux kernel versions.
How do I fix CVE-2019-20810?
To mitigate CVE-2019-20810, you should upgrade your Linux kernel to version 5.6 or later.
Which Linux distributions are affected by CVE-2019-20810?
CVE-2019-20810 affects the Linux kernel prior to version 5.6, including specific versions of openSUSE and Ubuntu.
What is the impact of CVE-2019-20810?
The impact of CVE-2019-20810 is a memory leak that could lead to reduced system performance over time.
Is CVE-2019-20810 exploitable from remote?
CVE-2019-20810 is not directly exploitable from remote; it requires local access to the affected system.