imPC@ndo IT

Tracker / CVE-2019-19054

CVE-2019-19054

Medium 4.7

A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.

Affected products and versions

broadcom brocade_fabric_operating_system_firmware
canonical ubuntu_linux
fedoraproject fedora
linux linux_kernel · … → 5.3.11
netapp active_iq_unified_manager
netapp aff_baseboard_management_controller
netapp cloud_backup
netapp data_availability_services
netapp e-series_santricity_os_controller
netapp fas\/aff_baseboard_management_controller
netapp hci_baseboard_management_controller
netapp hci_compute_node_firmware
netapp solidfire\,_enterprise_sds_\&_hci_storage_node
netapp solidfire_\&_hci_management_node
netapp solidfire_baseboard_management_controller_firmware
netapp steelstore_cloud_integrated_storage
opensuse leap

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References