CVE-2019-18811

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.9

Description The issue is related to a memory leak in the sof set get large ctrl data() function, located in sound/soc/sof/ipc.c. This memory leak can be triggered by causing sof get ctrl copy params() failures, leading to a denial of service due to memory consumption. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations For Linux kernel versions through 5.3.9, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.