CVE-2019-19049

A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service…

published November 18, 2019

CVSS
—
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because unittest.c can only be reached during boot

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03596 · 89.4th percentile
Published
2019-11-18T05:23Z
EPSS history
Timeline
  • 18 NOV 05:23Z
    A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service…
    cvelistv5