CVE-2019-19052 (NVD)

2019-11-18

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.

Products Brocade_fabric_operating_system_firmware, Ubuntu_linux, Debian_linux, Linux_kernel, Active_iq_unified_manager, Aff_baseboard_management_controller, Cloud_backup, Data_availability_services, E\-Series_santricity_os_controller, Fas\/aff_baseboard_management_controller, Hci_baseboard_management_controller, Hci_compute_node_firmware, Solidfire\,_enterprise_sds_\&_hci_storage_node, Solidfire_\&_hci_management_node, Solidfire_baseboard_management_controller_firmware, Steelstore_cloud_integrated_storage, Leap, Sd\-Wan_edge
Type Improper Release of Memory Before Removing Last Reference (CWE-401)
First patch - None (likely due to unavailable code)
Patches https://github.com/torvalds/linux/commit/fb5be6a7b4863ecc44963bb80ca614584b6c7817
Links • https://usn.ubuntu.com/4225-1/
• https://usn.ubuntu.com/4228-2/
• https://usn.ubuntu.com/4227-1/
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11
• http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html