Tracker / CVE-2019-19049
CVE-2019-19049
High 7.5
A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because unittest.c can only be reached during boot
Affected products and versions
| linux | linux_kernel · 3.17 → 4.4.200 |
|---|---|
| linux | linux_kernel · 4.10 → 4.14.153 |
| linux | linux_kernel · 4.15 → 4.19.83 |
| linux | linux_kernel · 4.20 → 5.3.10 |
| linux | linux_kernel · 4.5 → 4.9.200 |
| opensuse | leap |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.