CVE-2019-19060 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel prior to 5.3.9 allows malicious users to cause a denial of service (memory consumption), aka CID-ab612b1daf41.

Linux Linux Kernel Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Aff Baseboard Management Controller -Netapp Data Availability Services -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Broadcom Brocade Fabric Operating System Firmware -Netapp Fas\\/aff Baseboard Management Controller -Netapp E-series Santricity Os Controller 11.0 Netapp E-series Santricity Os Controller 11.0.0 Netapp E-series Santricity Os Controller 11.20 Netapp E-series Santricity Os Controller 11.25 Netapp E-series Santricity Os Controller 11.30 Netapp E-series Santricity Os Controller 11.30.5r3 Netapp E-series Santricity Os Controller 11.40 Netapp E-series Santricity Os Controller 11.40.3r2 Netapp E-series Santricity Os Controller 11.40.5 Netapp E-series Santricity Os Controller 11.50.1 Netapp E-series Santricity Os Controller 11.50.2 Netapp E-series Santricity Os Controller 11.60

4.7

CVSSv3

An issue exists in the Linux kernel prior to 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows malicious users to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status, aka CID-9380afd6df70...

Linux Linux Kernel Debian Debian Linux 9.0

5.5

CVSSv3

An issue exists in the Linux kernel prior to 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows malicious users to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624.

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0

7.8

CVSSv3

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 exists in net/netfilter/x_tables.c. This allows an malicious user to gain privileges or cause a DoS (via heap memory corruption) through user name space

Linux Linux Kernel Brocade Fabric Operating System -Netapp Fas 8300 Firmware -Netapp Fas 8700 Firmware -Netapp Aff A400 Firmware -Netapp Aff A250 Firmware -Netapp Aff 500f Firmware -Netapp H610c Firmware -Netapp H610s Firmware -Netapp H615c Firmware -Netapp Hci Management Node -Netapp Solidfire -

18 Github repositories

6

CVSSv3

An issue exists in the Linux kernel prior to 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive ...

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 20.04

1 Github repository1 Article

6.7

CVSSv3

In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel up to and including 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly...

Linux Linux Kernel Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Fas\\/aff Baseboard Management Controller -

7.8

CVSSv3

A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as we...

Linux Linux Kernel 5.12 Linux Linux Kernel Debian Debian Linux 9.0 Netapp Cloud Backup -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -

8.8

CVSSv3

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel up to and including 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinis...

Linux Linux Kernel Fedoraproject Fedora 33 Debian Debian Linux 9.0 Netapp Cloud Backup -Netapp Solidfire Baseboard Management Controller Firmware -Netapp H700s Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H300s Firmware -Netapp H500e Firmware -Netapp H300e Firmware -Netapp H500s Firmware -

5.6

CVSSv3

kernel/bpf/verifier.c in the Linux kernel prior to 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks.

Linux Linux Kernel Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Opensuse Leap 15.0

4.3

CVSSv3

An issue exists in the Linux kernel prior to 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints, aka CID-998912346c0d.

Linux Linux Kernel Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook