VDB
DEBIAN-CVE-2019-19070
DEBIAN-CVE-2019-19070
PUBLISHED
CVSS 7.5 HIGH
A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering devm_add_action_or_reset() failures, aka CID-d3b0ffa1d75d. NOTE: third parties dispute the relevance of this because the system must have already been out of memory before the probe began
Risk Scores
CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | linux | 6.17.2-1~exp1, 6.17.13-1~bpo13+1, 6.17.13-1 |
| Debian:12 | linux | 6.11.4-1, 6.11.5-1, 6.11.5-1~bpo12+1 |
| Debian:11 | linux | *, 6.1.129-1, 6.1.133-1 |
| Debian:14 | linux | *, 6.19.12-1, * |
Timeline
- Nov 18, 2019 CVE Published
- Apr 28, 2026 CVE Updated