PT-2019-4209
CVE-2019-19058
·
Published
2019-10-09
·
Updated
2021-05-28
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.3.11
Description
A memory leak in the
alloc sgtable() function in the Linux kernel allows attackers to cause a denial of service (memory consumption) by triggering alloc page() failures. This issue is related to the drivers/net/wireless/intel/iwlwifi/fw/dbg.c file. The vulnerability can be exploited by remote attackers to cause a denial of service.Recommendations
For Linux kernel versions prior to 5.3.11, update to a version that includes the fix for this issue to prevent memory leaks and potential denial of service attacks. As a temporary workaround, consider restricting access to the
alloc sgtable() function to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾