CVE-2019-18807

Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to…

published November 7, 2019

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by triggering static_config_buf_prepare_for_upload() or sja1105_inhibit_tx() failures, aka CID-68501df92d11.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02566 · 85.0th percentile
Published
2019-11-07T15:29Z
EPSS history
Timeline
  • 07 NOV 15:29Z
    Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to…
    cvelistv5