NetSight
IP …
high7.5

CVE-2019-16995

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial…

Impact

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.17 before 3.18.137
from 4.4 before 4.4.177
from 4.9 before 4.9.164
from 4.14 before 4.14.107
from 4.19 before 4.19.30
from 4.20 before 4.20.17
OpensuseLeap
Versions 15.0, 15.1
NetappAff A700s Firmware
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions
NetappH610s Firmware
All versions

Weakness classification

CWE-401

References