NetSight
IP …
low3.3

CVE-2019-19057

Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers…

Impact

Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 5.3.11
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.10
DebianDebian Linux
Version 8.0
FedoraprojectFedora
Versions 30, 31
OpensuseLeap
Version 15.1
NetappActive Iq Unified Manager
All versions
NetappAff Baseboard Management Controller
All versions
NetappCloud Backup
All versions
NetappData Availability Services
All versions
NetappE-Series Santricity Os Controller
Versions 11.0, 11.0.0, 11.20, 11.25, 11.30, 11.30.5r3
NetappFas\/Aff Baseboard Management Controller
All versions
NetappHci Baseboard Management Controller
Version h610s

Weakness classification

CWE-401

References