CVE-2019-19055

** DISPUTED ** A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred.

Link	Resource
https://github.com/torvalds/linux/commit/1399c59fa92984836db90538cf92397fe7caaa57	Patch Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1157319	Issue Tracking Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/	Mailing List Third Party Advisory
https://usn.ubuntu.com/4225-1/	Third Party Advisory
https://usn.ubuntu.com/4226-1/	Third Party Advisory
https://usn.ubuntu.com/4225-2/	Third Party Advisory

Configuration 1

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

---

Published : 2019-11-18 06:15

Updated : 2020-08-24 05:37

---

NVD link : CVE-2019-19055

Mitre link : CVE-2019-19055

No products.

CWE-401