PT-2019-5663 · Linux+4 · Linux Kernel+4

Published 2019-03-03 · Updated 2023-01-17 · CVE-2019-15916

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0.1

Description The issue is related to a memory leak error in the register queue kobjects() function, located in net/core/net-sysfs.c, which can cause a denial of service. This can be exploited by a remote attacker to disrupt service.

Recommendations For Linux kernel versions prior to 5.0.1, update to version 5.0.1 or later to resolve the issue.

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALT-PU-2019-1415

ALT-PU-2019-1436

ALT-PU-2019-1506

BDU:2020-04876

CESA-2019_3309

CESA-2019_3517

CESA-2020_1016

CVE-2019-15916

OPENSUSE-SU-2019:2675-1

OPENSUSE-SU-2019_2675-1

RHSA-2019:3309

RHSA-2019:3517

RHSA-2019_3309

RHSA-2019_3517

RHSA-2020:0740

RHSA-2020:1016

RHSA-2020:1070

RHSA-2020:2522

RHSA-2020:2851

RHSA-2020_1016

RHSA-2020_1070

SUSE-SU-2019:3200-1

SUSE-SU-2019:3289-1

SUSE-SU-2019:3294-1

SUSE-SU-2019:3295-1

SUSE-SU-2019:3316-1

SUSE-SU-2019:3317-1

SUSE-SU-2019:3371-1

SUSE-SU-2019:3372-1

SUSE-SU-2019:3381-1

SUSE-SU-2020:0093-1

SUSE-SU-2020:14354-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

References · 575

• https://security-tracker.debian.org/tracker/CVE-2019-15916 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:3381-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-15916 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:3309 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2675-1 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=895a5e96dbd6386c8e78e5b78e067dcc67b7f0ab · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2020:0740 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:3200-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-15916 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2019:3317-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15916 · Security Note
• https://linux.oracle.com/errata/ELSA-2019-4850.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:3372-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-1016.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:3517 · Vendor Advisory