Name: CVE-2019-19078: Missing Release of Memory after Effective Lifetime
Creator: Rapid7
Published: 2019-11-18T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-19078, CWE-401, CVSS 7.5, EPSS 0.03952

A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-b8d17e7d93d2.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade linux	Jul 30, 2024	Nov 18, 2019
Huawei Euleros 2_0_sp5	—	Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools	Feb 24, 2020	Nov 18, 2019
Huawei Euleros 2_0_sp8	—	Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-headersUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade bpftool	Jan 3, 2020	Nov 18, 2019
Oracle_linux	—	Upgrade kernel-uek	Sep 12, 2020	Sep 19, 2019
Suse	—	Upgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-obs-build	Dec 7, 2019	Nov 18, 2019
Ubuntu	—	Upgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-gke-4.15Upgrade linux-image-aws-edgeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-edgeUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1071-azureUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-edgeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.3.0-1011-awsUpgrade linux-image-virtualUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-88-lowlatency	Jan 29, 2020	Nov 18, 2019
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Nov 18, 2019

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business