PT-2019-4207 · Linux+2 · Linux Kernel+2

Robert Frohl · Publicado 2019-10-01 · Atualizado 2026-03-13 · CVE-2019-19070

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.11

Description A memory leak in the spi gpio probe() function in drivers/spi/spi-gpio.c allows attackers to cause a denial of service by triggering devm add action or reset() failures. This issue is disputed by third parties because the system must have already been out of memory before the probe began.

Recommendations For Linux kernel versions through 5.3.11, update to a version later than 5.3.11 to resolve the issue. As a temporary workaround, consider restricting system resources to prevent memory exhaustion.

Correção

DoS

Resource Exhaustion

Memory Leak

Enumeração de Fraquezas

CWE-400

CWE-401

Identificadores relacionados

ALT-PU-2020-1003

ALT-PU-2020-1010

ALT-PU-2020-1043

ALT-PU-2020-1198

ALT-PU-2020-1421

ALT-PU-2020-1450

ALT-PU-2020-1501

ALT-PU-2020-1714

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

BDU:2019-04804

CVE-2019-19070

ECHO-E5D0-971C-CE39

Produtos afetados

Alt Linux

Debian

Linux Kernel

Referências · 19

• https://github.com/torvalds/linux/commit/d3b0ffa1d75d5305ebe34735598993afbb8a869d · Correção
• https://osv.dev/vulnerability/CVE-2019-19070 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T · Aviso do Fabricante
• https://access.redhat.com/security/cve/cve-2019-19070 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF · Aviso do Fabricante
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2019-19070 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-19070 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-19070 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-19070 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2019-19070 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-19070 · Aviso do Fabricante
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2019-19070 · Aviso do Fabricante
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.7 · Nota
• https://bdu.fstec.ru/vul/2019-04804 · Nota de Segurança