CVE-2019-19050
Fixed in a distro release EPSS 5%
A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.
Products: linux_kernel, fedoraproject fedora, canonical ubuntu_linux, netapp active_iq_unified_manager, netapp data_availability_services, netapp e-series_santricity_os_controller, netapp hci_management_node, netapp solidfire, netapp steelstore_cloud_integrated_storage, broadcom fabric_operating_system, netapp aff_a700s_firmware, netapp fas8300_firmware, netapp fas8700_firmware, netapp aff_a400_firmware, netapp h610s_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 5.4.6-1 |
| Debian 13 | linux | 5.4.6-1 |
| Debian 14 | linux | 5.4.6-1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.0 | 5.0.0-1024.27~18.04.1 |
| Ubuntu 18.04 LTS | linux-azure | 5.0.0-1029.31~18.04.1 |
| Ubuntu 18.04 LTS | linux-azure-5.3 | 5.3.0-1013.14~18.04.1 |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp | 5.0.0-1029.30~18.04.1 |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | 5.3.0-1012.13~18.04.1 |
| Ubuntu 18.04 LTS | linux-gcp-edge | no fix |
| Ubuntu 18.04 LTS | linux-gke-5.0 | 5.0.0-1029.30~18.04.1 |
| Ubuntu 18.04 LTS | linux-gke-5.3 | 5.3.0-1012.13~18.04.1 |
| Ubuntu 18.04 LTS | linux-hwe | 5.3.0-40.32~18.04.1 |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-oem-osp1 | 5.0.0-1037.42 |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | 5.0.0-1010.15~18.04.1 |
| Ubuntu 18.04 LTS | linux-raspi2-5.3 | 5.3.0-1018.20~18.04.1 |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-gkeop | no fix |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |