PT-2019-3979

CVE-2019-18809

·

Published

2019-10-24

·

Updated

2021-05-28

Description by

CVSS 2.0
4.9
Medium
MetricsAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.9
Description The issue is related to a memory leak in the af9005 identify state() function, which can lead to uncontrolled resource consumption. This can be exploited by a remote attacker to cause a denial of service, specifically through memory consumption.
Recommendations For Linux kernel versions prior to 5.3.9, update to version 5.3.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the af9005 identify state() function to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2020:4431
ALT-PU-2019-3113
ALT-PU-2019-3136
ALT-PU-2019-3184
ALT-PU-2020-1198
ALT-PU-2020-1421
ALT-PU-2020-1450
ALT-PU-2020-1501
ALT-PU-2020-1714
ALT-PU-2020-2410
ALT-PU-2020-2433
ALT-PU-2021-1870
CESA-2020_4431
CESA-2020_4609
DLA-2114-1
OPENSUSE-SU-2019:2675-1
OPENSUSE-SU-2019_2675-1
RHSA-2020:4431
RHSA-2020_4431
RHSA-2020:4609
RHSA-2020_4609
SUSE-SU-2019:3200-1
SUSE-SU-2019:3289-1
SUSE-SU-2019:3316-1
SUSE-SU-2019:3317-1
SUSE-SU-2019:3371-1
SUSE-SU-2019:3372-1
SUSE-SU-2019:3381-1
SUSE-SU-2020:0093-1
SUSE-SU-2020:0599-1
SUSE-SU-2020:0613-1
USN-4285-1
USN-4287-1
USN-4287-2
USN-4300-1
Found an issue in the description? Have something to add? Feel free to write us 👾