PT-2019-5319 · Linux+4 · Linux Kernel+4

Jian Luo

·

CVE-2019-15807

·

Published

2019-05-29

·

Updated

2021-05-28

CVSS v3.1

4.7

Medium

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.1.13
Description The issue is related to an uncontrolled resource consumption in the Linux kernel's drivers/scsi/libsas/sas expander.c component. It is caused by a memory leak that occurs when SAS expander discovery fails, leading to a denial of service.
Recommendations For Linux kernel versions prior to 5.1.13, update to version 5.1.13 or later to resolve the issue.

Fix

DoS

Resource Exhaustion

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-400CWE-401CWE-399

Related Identifiers

ALT-PU-2019-2135
ALT-PU-2019-2200
ALT-PU-2019-2201
ALT-PU-2019-2314
ALT-PU-2020-1198
ALT-PU-2020-1501
ALT-PU-2020-2410
ALT-PU-2020-2433
ALT-PU-2021-1870
BDU:2020-02385
CESA-2020_4060
CVE-2019-15807
DLA-1919-1
DLA-1919-2
DLA-1930-1
RHSA-2020:4060
RHSA-2020:4062
RHSA-2020_4060
RHSA-2020_4062
SUSE-SU-2019:14218-1
SUSE-SU-2019:2949-1
SUSE-SU-2019:2950-1
SUSE-SU-2019:2984-1
SUSE-SU-2019_14218-1

Affected Products

Alt Linux
Centos
Linux Kernel
Red Hat
Suse