CVE-2019-19071

CVSS v3.1 7.5 (High)

CVSS v2.0 7.8 (High)

EPSS 1.34 % (86^th)

Affected Products 2

Advisories 19

A memory leak in the rsi_send_beacon() function in drivers/net/wireless/rsi/rsi_91x_mgmt.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering rsi_prepare_beacon() failures, aka CID-d563131ef23c.

Weaknesses

CWE-401: Missing Release of Memory after Effective Lifetime

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2019-11-18 06:15:13
(4 years ago)
Updated Date: 2023-11-07 03:07:27
(10 months ago)

Affected Products

Canonical

Ubuntu Linux

Linux

Linux Kernel

Configuration #1

	CPE23	From	Up To
Linux Kernel from 4.14 version and prior 4.14.159 version	cpe:2.3:o:linux:linux_kernel	>= 4.14	< 4.14.159
Linux Kernel from 4.15 version and prior 4.19.89 version	cpe:2.3:o:linux:linux_kernel	>= 4.15	< 4.19.89
Linux Kernel from 4.20 version and prior 5.3.16 version	cpe:2.3:o:linux:linux_kernel	>= 4.20	< 5.3.16
Linux Kernel from 5.4.0 version and prior 5.4.3 version	cpe:2.3:o:linux:linux_kernel	>= 5.4.0	< 5.4.3

Configuration #2

		CPE23	From	Up To
	Canonical Ubuntu Linux 14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04:::*:esm
	Canonical Ubuntu Linux 16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04:::*:esm
	Canonical Ubuntu Linux 18.04	cpe:2.3:o:canonical:ubuntu_linux:18.04:::*:lts
	Canonical Ubuntu Linux 19.10	cpe:2.3:o:canonical:ubuntu_linux:19.10