imPC@ndo IT

Tracker / CVE-2019-19947

CVE-2019-19947

Medium 4.6

In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.

Affected products and versions

canonical ubuntu_linux
debian debian_linux
linux linux_kernel · … → 5.4.6
netapp active_iq_unified_manager
netapp aff_baseboard_management_controller
netapp cloud_backup
netapp data_availability_services
netapp e-series_santricity_os_controller · 11.0 → 11.70.2
netapp fas\/aff_baseboard_management_controller
netapp hci_baseboard_management_controller
netapp solidfire_\&_hci_management_node
netapp solidfire_baseboard_management_controller
netapp steelstore_cloud_integrated_storage

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References