huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2019-18277: haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value
Component: haproxy
Severity: Moderate
CWE: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'))
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)
Public date: 2019-09-13T00:00:00+00:00

A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly rejected. The impact was limited but if combined with the "http-reuse always" setting, it could be used to help construct an HTTP request smuggling attack against a vulnerable component employing a lenient parser that would ignore the content-length header as soon as it saw a transfer-encoding one (even if not entirely valid according to the specification).

Statement: To exploit this vulnerability a vulnerable backend server is required. In particular the server should incorrectly parse the Transfer-Encoding HTTP header.

This issue did not affect the versions of haproxy as shipped with Red Hat Enterprise Linux 6, and 7 as they did not include support for `http-reuse` option.

Affected upstream versions: n/a
Fixed upstream versions: v2.0.6
Upstream repository: https://git.haproxy.org/haproxy-2.0.git
Upstream fix commit: 196a7df44d8129d1adc795da020b722614d6a581
CVE-2019-18282: kernel: The flow_dissector feature allows device tracking
Component: kernel
Severity: Moderate
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Public date: 2019-10-22T00:00:00+00:00

A device tracking vulnerability was found in the flow_dissector feature in the Linux kernel. This flaw occurs because the auto flowlabel of the UDP IPv6 packet relies on a 32-bit hashmd value as a secret, and jhash (instead of siphash) is used. The hashmd value remains the same starting from boot time and can be inferred by an attacker.


Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 55667441c84fa5e0911a0aac44fb059c15ba6da2
CVE-2019-18397: fribidi: buffer overflow in fribidi_get_par_embedding_levels_ex() in lib/fribidi-bidi.c leading to denial of service and possible code execution
Component: fribidi
Severity: Important
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7.8 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2019-11-07T00:00:00+00:00

A heap-based buffer overflow vulnerability was found in GNU FriBidi, an implementation of the Unicode Bidirectional Algorithm (bidi). When the flaw is triggered it's possible to manipulate the heap contents, leading to memory corruption causing a denial of service and to arbitrary code execution. The highest threat from this flaw to both data and system availability.


Affected upstream versions: n/a
Fixed upstream versions: v1.0.8
Upstream repository: https://github.com/fribidi/fribidi
Upstream fix commit: 034c6e9a1d296286305f4cfd1e0072b879f52568
CVE-2019-18408: libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry
Component: libarchive
Severity: Important
CWE: CWE-416 (Use After Free)
CVSS v3: 8.1 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-05-10T00:00:00+00:00

A use-after-free vulnerability was discovered in libarchive in the way it processes RAR archives when there is an error in one of the archive's entries. An application that accepts untrusted RAR archives may be vulnerable to this flaw, which could allow a remote attacker to cause a denial of service or to potentially execute code.

Statement: This issue did not affect the versions of libarchive as shipped with Red Hat Enterprise Linux 6 as they did not include support for RAR archives.

Affected upstream versions: n/a
Fixed upstream versions: v3.4.0
Upstream repository: https://github.com/libarchive/libarchive
Upstream fix commit: b8592ecba2f9e451e1f5cb7ab6dcee8b8e7b3f60
CVE-2019-18466: podman: resolving symlink in host filesystem leads to unexpected results of copy operation
Component: podman
Severity: Moderate
CWE: CWE-59 (Improper Link Resolution Before File Access ('Link Following'))
CVSS v3: 2.5 (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N)
Public date: 2019-08-22T00:00:00+00:00

It was discovered that podman resolves a symlink in the host context during a copy operation from the container to the host. An attacker could create a container image containing particular symlinks that, when copied by a victim user to the host filesystem, may overwrite existing files with others from the host.

Statement: This issue did not affect the versions of podman as shipped with Red Hat Enterprise Linux 8 as they did not include support for the copy function.

This issue did not affect the versions of podman as shipped in OpenShift Container Platform 3.11 and 4.1 as they did not include support for the copy function.

The version of podman shipped in OpenShift Container Platform 4.2 was superseded by the version delivered Red Hat Enterprise Linux 8.

Affected upstream versions: n/a
Fixed upstream versions: v1.6.0
Upstream repository: https://github.com/containers/libpod
Upstream fix commit: 5c09c4d2947a759724f9d5aef6bac04317e03f7e
CVE-2019-18609: librabbitmq: integer overflow in amqp_handle_input in amqp_connection.c leads to heap-based buffer overflow
Component: librabbitmq
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Public date: 2019-12-01T00:00:00+00:00

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTION_STATE_HEADER. A rogue server could return a malicious frame header that leads to a smaller target_size value than needed. This condition is then carried on to a memcpy function that copies too much data into a heap buffer.


Affected upstream versions: n/a
Fixed upstream versions: v0.10.0
Upstream repository: https://github.com/alanxz/rabbitmq-c
Upstream fix commit: fc85be7123050b91b054e45b91c78d3241a5047a
CVE-2019-18660: kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure
Component: kernel
Severity: Moderate
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Public date: 2019-11-28T00:00:00+00:00

A flaw was found in the way the Linux kernel implemented a software flush of the Count Cache (indirect branch cache) and Link (Return Address) Stack on the PowerPC platform. The flushing of these structures helps to prevent SpectreRSB like attacks which may leak information from one user process to another. An unprivileged user could use this flaw to cross the syscall or process boundary and read privileged memory by conducting targeted cache side-channel attacks.

Statement: This issue affects versions of the kernel package as shipped with Red Hat Enterprise Linux 6, 7 and 8. Future kernel updates for Red Hat Enterprise Linux 6, 7 and 8 may address this issue.

This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v5.5
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 39e72bf96f5847ba87cc5bd7a3ce0fed813dc9ad
CVE-2019-18805: kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c
Component: kernel
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 7.3 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Public date: 2019-04-16T00:00:00+00:00

A flaw was reported in the Linux kernel's TCP subsystem while calculating a packet round trip time, when a sysctl parameter (/proc/sys/net/ipv4/tcp_min_rtt_wlen) is set incorrectly. This causes an integer overflow which can lead to a denial Of service (DOS) attack.


Affected upstream versions: n/a
Fixed upstream versions: v5.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 19fad20d15a6494f47f85d869f00b11343ee5c78
CVE-2019-18808: kernel: memory leak in ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c
Component: kernel
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-18T00:00:00+00:00

A flaw was found in the AMD Cryptographic Co-processor driver in the Linux kernel. An attacker, able to send invalid SHA type commands, could cause the system to crash. The highest threat from this vulnerability is to system availability.

Statement: This issue is rated as having Moderate impact because it affects only specific hardware enabled systems.

Affected upstream versions: n/a
Fixed upstream versions: v5.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 128c66429247add5128c03dc1e144ca56f05a4e2
CVE-2019-18809: kernel: memory leak in  af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4.6 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-27T00:00:00+00:00

A flaw was found in the Afatech 9005 DVB-T receiver driver in the Linux kernel. An attacker, with physical access to the system, could cause the system to crash following a resource cleanup. The highest threat from this vulnerability is to system availability.


Affected upstream versions: n/a
Fixed upstream versions: v5.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 2289adbfa559050d2a38bcd9caac1c18b800e928
CVE-2019-18811: kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c
Component: kernel
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-27T00:00:00+00:00

A flaw was found in the Linux kernel’s
sof_set_get_large_ctrl_data function, in the way it handled memory cleanup in a specific error path. A local attacker could use this flaw to crash the system.


Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 45c1380358b12bf2d1db20a5874e9544f56b34ab
CVE-2019-19045: kernel: dos in mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c
Component: kernel
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4.5 (CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-18T00:00:00+00:00

A flaw was found in the Linux kernel. The Mellanox Technologies Innova driver mishandles resource cleanup on error. An attacker, able to trigger error could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

Statement: This issue is rated as having Moderate impact because of the privileges needed to trigger the resource cleanup code path.

Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: c8c2a057fdc7de1cd16f4baa51425b932a42eb39
CVE-2019-19046: kernel: Denial Of Service in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c
Component: kernel
Severity: Moderate
CWE: CWE-772 (Missing Release of Resource after Effective Lifetime)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-18T00:00:00+00:00

A memory leak problem was found in __ipmi_bmc_register in drivers/char/ipmi/ipmi_msghandler.c in Intelligent Platform Management Interface (IPMI) which is used for incoming and outgoing message routing purpose. This flaw may allow an attacker with minimal privilege to cause a denial of service by triggering ida_simple_get() failure.


Affected upstream versions: n/a
Fixed upstream versions: v5.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab
CVE-2019-19047: kernel: dos in mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-18T00:00:00+00:00

A flaw was found in the way the Mellanox 5th generation network adapters (ConnectX series) core driver in the Linux kernel handled resource cleanup in the mlx5_fw_fatal_reporter_dump function. This flaw allows an attacker with the ability to trigger errors in the mlx5_crdump_collect function to crash the system.

Statement: This issue is rated as having Low impact because of the preconditions needed to trigger the resource cleanup code path.

Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: c7ed6d0183d5ea9bc31bcaeeba4070bd62546471
CVE-2019-19055: kernel: memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c allows DoS
Component: kernel
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-10-05T00:00:00+00:00

A flaw was found in the Linux kernel. The Wireless configuration API functionality mishandles resource cleanup in nl80211_get_ftm_responder_stats function. An attacker able to trigger the resource cleanup code path could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

Statement: This issue is rated as having Moderate impact because of the preconditions needed to trigger the resource cleanup code path.

Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 1399c59fa92984836db90538cf92397fe7caaa57
CVE-2019-19056: kernel: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows to cause DoS
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-10-05T00:00:00+00:00

A flaw was found in the way the mwifiex PCIE driver in the Linux kernel handled resource cleanup on a DMA mapping error. This flaw allows an attacker able to trigger the DMA mapping error to crash the system.

Statement: This issue is rated as having Low impact because of the preconditions needed to trigger the resource cleanup code path (DMA mapping error).

Affected upstream versions: n/a
Fixed upstream versions: v5.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: db8fd2cde93227e566a412cf53173ffa227998bc
CVE-2019-19057: kernel: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c allows for a DoS
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2019-11-21T00:00:00+00:00

Two memory leak flaws were found in the Linux kernel's mwifiex_pcie_init_evt_ring() function. A local attacker, able to reload the kernel module or hotplug Marvell WiFi hardware using this driver, can cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures.


Affected upstream versions: n/a
Fixed upstream versions: v5.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: d10dcb615c8e29d403a24d35f8310a7a53e3050c
CVE-2019-19058: kernel: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allows for a DoS
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-21T00:00:00+00:00

A flaw was found in the Linux kernel. The Intel Wireless WiFi MVM Firmware driver mishandles resource cleanup during device coredump. An attacker able to trigger the device coredump and system-wide out of memory conditions at the same time could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

Statement: This issue is rated as having Low impact because of the preconditions needed to trigger the resource cleanup code path (system-wide out-of-memory condition).

Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: b4b814fec1a5a849383f7b3886b654a13abbda7d
CVE-2019-19059: kernel: Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c allows for a DoS
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-21T00:00:00+00:00

A flaw was found in the way the Intel Wireless driver in the Linux kernel handled resource cleanup during Gen 3 device initialization. This flaw allows an attacker with the ability to restrict access to DMA coherent memory on device initialization, to crash the system.

Statement: This issue is rated as having Low impact because of the preconditions needed to trigger the resource cleanup code path (ability to restrict access to dma coherent memory on device initialization).

Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 0f4f199443faca715523b0659aa536251d8b978f
CVE-2019-19062: kernel: memory leak in the crypto_report() function in crypto/crypto_user_base.c allows for DoS
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-21T00:00:00+00:00

A flaw was found in the Linux kernel. The crypto_report function mishandles resource cleanup on error. A local attacker able to induce the error conditions could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

Statement: This issue is rated as having Low impact because of the preconditions needed to trigger the error cleanup code path.

Affected upstream versions: n/a
Fixed upstream versions: v5.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: ffdde5932042600c6807d46c1550b28b0db6a3bc
CVE-2019-19063: kernel: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c allow for a DoS
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4.6 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-21T00:00:00+00:00

A flaw was found in the Linux kernel. The rtl_usb_probe function mishandles resource cleanup on error. An attacker able to induce the error conditions could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

Statement: This issue is rated as having Low impact because of the preconditions needed to trigger the resource cleanup code path (physical access).

Affected upstream versions: n/a
Fixed upstream versions: v5.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 3f93616951138a598d930dcaec40f2bfd9ce43bb
CVE-2019-19065: kernel: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c allows for a DoS
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-21T00:00:00+00:00

A flaw was found in the Linux kernel. The Intel OPA Gen1 driver mishandles resource cleanup. An attacker able to induce low memory condition on the system could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

Statement: This issue is rated as having Low impact because of the preconditions needed to trigger the resource cleanup code path (system-wide out-of-memory condition).

Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 34b3be18a04ecdc610aae4c48e5d1b799d8689f6
CVE-2019-19067: kernel: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c allow for a DoS
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-21T00:00:00+00:00

A flaw was found in the Linux kernel. The acp_hw_init function fails to cleanup resources properly. A local attacker can induce an error condition to crash the system. The highest threat from this vulnerability is to system availability.

Statement: This issue is rated as having Low impact because of the preconditions needed to trigger the error/resource cleanup code path.

Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 57be09c6e8747bf48704136d9e3f92bfb93f5725
CVE-2019-19068: kernel: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c allows for a DoS
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4.6 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-21T00:00:00+00:00

A flaw was found in the Linux kernel. A memory leak in the realtek driver allows an attacker to cause a denial of service through memory consumption. The highest threat from this vulnerability is to system availability.

Statement: This issue is rated as having Low impact because of the preconditions needed to trigger the error/resource cleanup code path (physical access and/or system-wide out-of-memory condition).

Affected upstream versions: n/a
Fixed upstream versions: v5.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: a2cdd07488e666aa93a49a3fc9c9b1299e27ef3c
CVE-2019-19072: kernel: A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c allows for a DoS
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-21T00:00:00+00:00

A flaw was found in the way the predicate_parse function in the tracing subsystem of the Linux kernel handled resource cleanup on error. This flaw allows an attacker with the ability to produce the error to crash the system.

Statement: This issue is rated as having Low impact because of the preconditions needed to trigger the error/resource cleanup code path (high privileges).

Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 96c5c6e6a5b6db592acae039fed54b5c8844cd35
CVE-2019-19073: kernel: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel (DOS)
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 4 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2019-11-21T00:00:00+00:00

Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.


Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 853acf7caf10b828102d92d05b5c101666a6142b