PT-2019-4230 · Linux+3 · Linux Kernel+3

Published 2019-10-09 · Updated 2023-01-19 · CVE-2019-19060

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.9

Description The issue is related to a memory leak in the adis update scan mode() function, located in drivers/iio/imu/adis buffer.c. This memory leak can be exploited by attackers to cause a denial of service due to memory consumption. The exploitation of this issue can allow a remote attacker to cause a service disruption.

Recommendations For Linux kernel versions prior to 5.3.9, update to version 5.3.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the adis update scan mode() function until a patch is available.

Fix

DoS

Memory Leak

Resource Exhaustion

Weakness Enumeration

CWE-401

CWE-400

Related Identifiers

ALT-PU-2019-3113

ALT-PU-2019-3128

ALT-PU-2019-3136

ALT-PU-2019-3138

ALT-PU-2019-3184

ALT-PU-2020-1024

ALT-PU-2020-1421

ALT-PU-2020-1450

ALT-PU-2020-1714

ALT-PU-2020-2410

ALT-PU-2020-2433

BDU:2019-04829

CVE-2019-19060

OPENSUSE-SU-2019:2675-1

OPENSUSE-SU-2019_2675-1

SUSE-SU-2019:3200-1

SUSE-SU-2019:3289-1

SUSE-SU-2019:3316-1

SUSE-SU-2019:3317-1

SUSE-SU-2019:3371-1

SUSE-SU-2019:3372-1

SUSE-SU-2019:3381-1

SUSE-SU-2020:0093-1

SUSE-SU-2020:0599-1

SUSE-SU-2020:0613-1

USN-4208-1

USN-4210-1

USN-4226-1

USN-4364-1

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 651

• https://github.com/torvalds/linux/commit/ab612b1daf415b62c58e130cb3d0f30b255a14d0 · Patch
• https://usn.ubuntu.com/4364-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-14895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11668 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-16746 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-2214 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19069 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-14896 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-17133 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4226-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:3289-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11494 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4208-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-16233 · Vendor Advisory