Name: CVE-2019-19075: Missing Release of Memory after Effective Lifetime
Creator: Rapid7
Published: 2019-11-18T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-19075, CWE-401, CVSS 7.5, EPSS 0.01188

A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures, aka CID-6402939ec86e.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade linux	Jul 30, 2024	Nov 18, 2019
Huawei Euleros 2_0_sp8	—	Upgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-tools-libs	Jan 3, 2020	Nov 18, 2019
Suse	—	Upgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-build	Dec 7, 2019	Nov 18, 2019
Ubuntu	—	Upgrade linux-image-oracleUpgrade linux-image-5.3.0-1008-kvmUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-24-genericUpgrade linux-image-4.15.0-1056-awsUpgrade linux-image-5.3.0-24-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-edgeUpgrade linux-image-oracle-edgeUpgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-4.15.0-1065-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1052-raspi2Upgrade linux-image-4.15.0-1069-snapdragonUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1051-kvmUpgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-gke-5.0Upgrade linux-image-gke-4.15Upgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-4.15.0-72-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-1023-awsUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-4.15.0-72-lowlatencyUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-4.15.0-1049-gkeUpgrade linux-image-4.15.0-72-generic-lpaeUpgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-1050-gcpUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.3.0-24-lowlatencyUpgrade linux-image-4.15.0-1030-oracleUpgrade linux-image-azureUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-gkeUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-lowlatency	Dec 3, 2019	Nov 18, 2019

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence