Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to cause a denial of service (memory consumption), aka CID-8572cea1461a.
References
| Link | Resource |
|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html | Third Party Advisory |
| https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 | Release Notes Vendor Advisory |
| https://github.com/torvalds/linux/commit/8572cea1461a006bce1d06c0c4b0575869125fa4 | Patch Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20191205-0001/ | Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html | Third Party Advisory |
| https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 | Release Notes Vendor Advisory |
| https://github.com/torvalds/linux/commit/8572cea1461a006bce1d06c0c4b0575869125fa4 | Patch Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20191205-0001/ | Third Party Advisory |
Configurations
History
21 Nov 2024, 04:34
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - Third Party Advisory | |
| References | () https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 - Release Notes, Vendor Advisory | |
| References | () https://github.com/torvalds/linux/commit/8572cea1461a006bce1d06c0c4b0575869125fa4 - Patch, Third Party Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20191205-0001/ - Third Party Advisory |
Information
Published : 2019-11-18 06:15
Updated : 2024-11-21 04:34
NVD link : CVE-2019-19080
Mitre link : CVE-2019-19080
CVE.ORG link : CVE-2019-19080
JSON object : View
Products Affected
opensuse
- leap
linux
- linux_kernel
CWE
CWE-401
Missing Release of Memory after Effective Lifetime