CVE-2019-19054

Description

A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.

CVSS breakdown

Affected products

• Broadcom / brocade_fabric_operating_system_firmware
• Canonical / Ubuntu Linux14.04 – 14.04
• Canonical / Ubuntu Linux16.04 – 16.04
• Canonical / Ubuntu Linux18.04 – 18.04
• Canonical / Ubuntu Linux20.04 – 20.04
• fedoraproject / fedora30 – 30
• fedoraproject / fedora31 – 31
• Linux / Linux kernel5.3.11
• NetApp / active_iq_unified_manager
• NetApp / aff_baseboard_management_controller
• NetApp / cloud_backup
• NetApp / data_availability_services
• NetApp / e-series_santricity_os_controller11.60 – 11.60
• NetApp / e-series_santricity_os_controller11.60.0 – 11.60.0
• NetApp / e-series_santricity_os_controller11.60.1 – 11.60.1
• NetApp / e-series_santricity_os_controller11.60.3 – 11.60.3
• NetApp / e-series_santricity_os_controller11.70.1 – 11.70.1
• NetApp / e-series_santricity_os_controller11.70.2 – 11.70.2
• NetApp / e-series_santricity_os_controller11.40.3r2 – 11.40.3r2
• NetApp / e-series_santricity_os_controller11.0 – 11.0
• NetApp / e-series_santricity_os_controller11.0.0 – 11.0.0
• NetApp / e-series_santricity_os_controller11.20 – 11.20
• NetApp / e-series_santricity_os_controller11.25 – 11.25
• NetApp / e-series_santricity_os_controller11.30 – 11.30
• NetApp / e-series_santricity_os_controller11.30.5r3 – 11.30.5r3
• NetApp / e-series_santricity_os_controller11.40 – 11.40
• NetApp / e-series_santricity_os_controller11.40.5 – 11.40.5
• NetApp / e-series_santricity_os_controller11.50.1 – 11.50.1
• NetApp / e-series_santricity_os_controller11.50.2 – 11.50.2
• NetApp / e-series_santricity_os_controller11.50.2 – 11.50.2
• NetApp / fas/aff_baseboard_management_controller
• NetApp / hci_baseboard_management_controllerh610s – h610s
• NetApp / hci_compute_node_firmware
• NetApp / solidfire_baseboard_management_controller_firmware
• NetApp / solidfire,_enterprise_sds_&_hci_storage_node
• NetApp / solidfire_&_hci_management_node
• NetApp / steelstore_cloud_integrated_storage
• openSUSE / Leap15.1 – 15.1

References

• PATCHhttps://github.com/torvalds/linux/commit/a7b2df76b42bdd026e3106cf2ba97db41345a177
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/
• MISChttps://security.netapp.com/advisory/ntap-20191205-0001/
• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
• VENDOR_ADVISORYhttps://usn.ubuntu.com/4527-1/
• VENDOR_ADVISORYhttps://usn.ubuntu.com/4526-1/
• VENDOR_ADVISORYhttps://usn.ubuntu.com/4525-1/