CVE-2019-18809 PUBLISHED

A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.

EPSS 0.09% · 26.1th percentile

Risk Scores

EPSS Score
0.09%
26.1th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-oem-osp15.0.0-1012.13, 5.0.0-1010.11, 0
Ubuntu:20.04:LTSlinux-riscv5.4.0-26.30, 5.4.0-24.28, 0
Ubuntu:18.04:LTSlinux-gcp-5.35.3.0-1009.10~18.04.1, 5.3.0-1012.13~18.04.1, 5.3.0-1010.11~18.04.1
Ubuntu:22.04:LTSlinux-intel-iot-realtime5.15.0-1073.75, 0
Ubuntu:16.04:LTSlinux-hwe4.13.0-41.46~16.04.1, 4.13.0-39.44~16.04.1, 4.13.0-38.43~16.04.1
Ubuntu:18.04:LTSlinux0, 4.15.0-76.86, 4.15.0-74.84
Ubuntu:Pro:14.04:LTSlinux-azure4.15.0-1057.62~14.04.1, 4.15.0-1060.65~14.04.1, 4.15.0-1061.66~14.04.1
Ubuntu:18.04:LTSlinux-aws-5.00, 5.0.0-1021.24~18.04.1, 5.0.0-1022.25~18.04.1
Ubuntu:18.04:LTSlinux-aws0, 4.15.0-1050.52, 4.15.0-1051.53
Ubuntu:22.04:LTSlinux-riscv5.15.0-1028.32, 5.15.0-1027.31, 5.15.0-1026.30
Ubuntu:18.04:LTSlinux-kvm4.15.0-1039.39, 0, 4.15.0-1002.2
Ubuntu:20.04:LTSlinux-gke5.4.0-1051.54, 5.4.0-1049.52, 5.4.0-1057.60
Ubuntu:18.04:LTSlinux-azure-5.35.3.0-1010.11~18.04.1, 5.3.0-1008.9~18.04.1, 5.3.0-1007.8~18.04.1
Ubuntu:16.04:LTSlinux-hwe-edge4.13.0-21.24~16.04.1, 0, 4.8.0-28.30~16.04.1
Ubuntu:22.04:LTSlinux-realtime0, 5.15.0-1032.35
Ubuntu:18.04:LTSlinux-gcp4.15.0-1034.36, 0, 4.15.0-1001.1
Ubuntu:18.04:LTSlinux-raspi2-5.35.3.0-1017.19~18.04.1, 0, 5.3.0-1018.20~18.04.1
Ubuntu:24.04:LTSlinux-raspi-realtime0, 6.8.0-2019.20
Ubuntu:20.04:LTSlinux-raspi25.3.0-1017.19, 5.3.0-1015.17, 5.4.0-1006.6
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1103.109+cvm1.1, 5.4.0-1074.77+cvm1.1, 5.4.0-1073.76+cvm1.1

…and 22 more

Timeline

References

Open in Interactive Console →