PT-2019-4207 · Linux+2 · Linux Kernel+2

Robert Frohl · Published 2019-10-01 · Updated 2026-03-13 · CVE-2019-19070

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.11

Description A memory leak in the spi gpio probe() function in drivers/spi/spi-gpio.c allows attackers to cause a denial of service by triggering devm add action or reset() failures. This issue is disputed by third parties because the system must have already been out of memory before the probe began.

Recommendations For Linux kernel versions through 5.3.11, update to a version later than 5.3.11 to resolve the issue. As a temporary workaround, consider restricting system resources to prevent memory exhaustion.

Fix

DoS

Resource Exhaustion

Memory Leak

Weakness Enumeration

CWE-400

CWE-401

Related Identifiers

ALT-PU-2020-1003

ALT-PU-2020-1010

ALT-PU-2020-1043

ALT-PU-2020-1198

ALT-PU-2020-1421

ALT-PU-2020-1450

ALT-PU-2020-1501

ALT-PU-2020-1714

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

BDU:2019-04804

CVE-2019-19070

ECHO-E5D0-971C-CE39

Affected Products

Alt Linux

Debian

Linux Kernel

References · 19

• https://github.com/torvalds/linux/commit/d3b0ffa1d75d5305ebe34735598993afbb8a869d · Patch
• https://osv.dev/vulnerability/CVE-2019-19070 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2019-19070 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-19070 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-19070 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19070 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2019-19070 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19070 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2019-19070 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04804 · Security Note
• https://bugzilla.suse.com/show_bug.cgi?id=1157294 · Patch
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T · Vendor Advisory