NetSight
IP …
medium4.6

CVE-2019-19068

A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel through 5.3.11 allows atta…

Impact

A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-a2cdd07488e6.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 5.3.11
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.10
DebianDebian Linux
Version 8.0
FedoraprojectFedora
Versions 30, 31
OpensuseLeap
Version 15.1
RedhatEnterprise Linux
Versions 7.0, 8.0

Weakness classification

CWE-401

References