CVE-2019-19044
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.
Affected (33)
Products: Linux: Linux Kernel · Broadcom: Brocade Fabric Operating System Firmware · Netapp: Active Iq Unified Manager, Aff Baseboard Management Controller, Cloud Backup, Data Availability Services, E Series Santricity Os Controller, Fas/aff Baseboard Management Controller, Hci Baseboard Management Controller, Solidfire, Enterprise Sds & Hci Storage Node, Solidfire & Hci Management Node, Steelstore Cloud Integrated Storage, Hci Compute Node Firmware, Solidfire Baseboard Management Controller Firmware · +1 more
Show all products
Linux: Linux Kernel · Broadcom: Brocade Fabric Operating System Firmware · Netapp: Active Iq Unified Manager, Aff Baseboard Management Controller, Cloud Backup, Data Availability Services, E Series Santricity Os Controller, Fas/aff Baseboard Management Controller, Hci Baseboard Management Controller, Solidfire, Enterprise Sds & Hci Storage Node, Solidfire & Hci Management Node, Steelstore Cloud Integrated Storage, Hci Compute Node Firmware, Solidfire Baseboard Management Controller Firmware · Canonical: Ubuntu Linux
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 5.3 to 5.3.11 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| Version 11.0.0 | |
| All versions | |
| Version h610s | |
| All versions | |
| All versions | |
| All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Netapp Hci Compute Node | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Netapp Solidfire Baseboard Management Controller | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 18.04 |
References (8)
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Timeline
No history available yet.