CVE-2019-19069
Fixed in a distro release EPSS 3%
A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering dma_get_sgtable() failures, aka CID-fc739a058d99.
Products: linux_kernel, canonical ubuntu_linux, netapp active_iq_unified_manager, netapp data_availability_services, netapp e-series_santricity_os_controller, netapp hci_management_node, netapp solidfire, netapp steelstore_cloud_integrated_storage, broadcom fabric_operating_system, netapp aff_a700s_firmware, netapp fas8300_firmware, netapp fas8700_firmware, netapp aff_a400_firmware, netapp h610s_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 5.3.9-1 |
| Debian 13 | linux | 5.3.9-1 |
| Debian 14 | linux | 5.3.9-1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-azure-5.3 | 5.3.0-1008.9~18.04.1 |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | 5.3.0-1009.10~18.04.1 |
| Ubuntu 18.04 LTS | linux-gcp-edge | no fix |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-gkeop | no fix |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |