A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service (memory consumption), aka CID-8ce39eb5a67a.
References
| Link | Resource |
|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html | Third Party Advisory |
| https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 | Release Notes Vendor Advisory |
| https://github.com/torvalds/linux/commit/8ce39eb5a67aee25d9f05b40b673c95b23502e3e | Patch Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20191205-0001/ | Third Party Advisory |
| http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html | Third Party Advisory |
| https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 | Release Notes Vendor Advisory |
| https://github.com/torvalds/linux/commit/8ce39eb5a67aee25d9f05b40b673c95b23502e3e | Patch Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20191205-0001/ | Third Party Advisory |
Configurations
History
21 Nov 2024, 04:34
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - Third Party Advisory | |
| References | () https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 - Release Notes, Vendor Advisory | |
| References | () https://github.com/torvalds/linux/commit/8ce39eb5a67aee25d9f05b40b673c95b23502e3e - Patch, Third Party Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20191205-0001/ - Third Party Advisory |
Information
Published : 2019-11-18 06:15
Updated : 2024-11-21 04:34
NVD link : CVE-2019-19081
Mitre link : CVE-2019-19081
CVE.ORG link : CVE-2019-19081
JSON object : View
Products Affected
opensuse
- leap
redhat
- enterprise_linux
linux
- linux_kernel
CWE
CWE-401
Missing Release of Memory after Effective Lifetime