NetSight
IP …
medium4.6

CVE-2019-19947

In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c …

Impact

In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 5.4.6
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.10
NetappActive Iq Unified Manager
All versions
NetappCloud Backup
All versions
NetappData Availability Services
All versions
NetappE-Series Santricity Os Controller
from 11.0 through 11.70.2
NetappFas\/Aff Baseboard Management Controller
All versions
NetappHci Baseboard Management Controller
Version h610s
NetappSolidfire \& Hci Management Node
All versions
NetappSteelstore Cloud Integrated Storage
All versions
NetappAff Baseboard Management Controller
Version a700s

Weakness classification

CWE-908

References