p PatchFirst

CVE-2019-19049

CVE-2019-19049

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because unittest.c can only be reached during boot

CVSS 7.5 · High · EPSS 3.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • linux Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.3.15-1

    Update to 5.3.15-1

  • linux Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.3.15-1

    Update to 5.3.15-1

  • linux Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.3.15-1

    Update to 5.3.15-1

  • linux-aws Ubuntu:Pro:14.04:LTS

    Versions
    • 4.4.0-1002.2
    • 4.4.0-1003.3
    • 4.4.0-1005.5
    • 4.4.0-1006.6
    • 4.4.0-1009.9
    • 4.4.0-1010.10
    • 4.4.0-1011.11
    • 4.4.0-1012.12
    • 4.4.0-1014.14
    • 4.4.0-1016.16
    • 4.4.0-1017.17
    • 4.4.0-1019.19
    • 4.4.0-1022.22
    • 4.4.0-1023.23
    • 4.4.0-1024.25
    • 4.4.0-1025.26
    • 4.4.0-1027.30
    • 4.4.0-1028.31
    • 4.4.0-1029.32
    • 4.4.0-1031.34
    • 4.4.0-1032.35
    • 4.4.0-1034.37
    • 4.4.0-1036.39
    • 4.4.0-1037.40
    • 4.4.0-1038.41
    • 4.4.0-1039.42
    • 4.4.0-1040.43
    • 4.4.0-1042.45
    • 4.4.0-1044.47
    • 4.4.0-1045.48
    • 4.4.0-1046.50
    • 4.4.0-1048.52
    • 4.4.0-1050.54
    • 4.4.0-1052.56
    • 4.4.0-1054.58
    • 4.4.0-1055.59
    • 4.4.0-1056.60
    • 4.4.0-1058.62
    Affected ranges
    • ECOSYSTEM: < 4.4.0-1059.63

    Update to 4.4.0-1059.63

  • linux-azure Ubuntu:Pro:14.04:LTS

    Versions
    • 4.15.0-1023.24~14.04.1
    • 4.15.0-1030.31~14.04.1
    • 4.15.0-1031.32~14.04.1
    • 4.15.0-1032.33~14.04.2
    • 4.15.0-1035.36~14.04.2
    • 4.15.0-1036.38~14.04.2
    • 4.15.0-1037.39~14.04.2
    • 4.15.0-1039.41~14.04.2
    • 4.15.0-1040.44~14.04.1
    • 4.15.0-1041.45~14.04.1
    • 4.15.0-1042.46~14.04.1
    • 4.15.0-1045.49~14.04.1
    • 4.15.0-1046.50~14.04.1
    • 4.15.0-1047.51~14.04.1
    • 4.15.0-1049.54~14.04.1
    • 4.15.0-1050.55~14.04.1
    • 4.15.0-1051.56~14.04.1
    • 4.15.0-1052.57~14.04.1
    • 4.15.0-1055.60~14.04.1
    • 4.15.0-1056.61~14.04.1
    • 4.15.0-1057.62~14.04.1
    • 4.15.0-1059.64~14.04.1
    • 4.15.0-1060.65~14.04.1
    • 4.15.0-1061.66~14.04.1
    • 4.15.0-1063.68~14.04.1
    • 4.15.0-1064.69~14.04.1
    Affected ranges
    • ECOSYSTEM: < 4.15.0-1066.71~14.04.1

    Update to 4.15.0-1066.71~14.04.1

  • linux-lts-xenial Ubuntu:Pro:14.04:LTS

    Versions
    • 4.4.0-13.29~14.04.1
    • 4.4.0-14.30~14.04.2
    • 4.4.0-15.31~14.04.1
    • 4.4.0-18.34~14.04.1
    • 4.4.0-21.37~14.04.1
    • 4.4.0-22.39~14.04.1
    • 4.4.0-22.40~14.04.1
    • 4.4.0-24.43~14.04.1
    • 4.4.0-28.47~14.04.1
    • 4.4.0-31.50~14.04.1
    • 4.4.0-34.53~14.04.1
    • 4.4.0-36.55~14.04.1
    • 4.4.0-38.57~14.04.1
    • 4.4.0-42.62~14.04.1
    • 4.4.0-45.66~14.04.1
    • 4.4.0-47.68~14.04.1
    • 4.4.0-51.72~14.04.1
    • 4.4.0-53.74~14.04.1
    • 4.4.0-57.78~14.04.1
    • 4.4.0-59.80~14.04.1
    • 4.4.0-62.83~14.04.1
    • 4.4.0-63.84~14.04.2
    • 4.4.0-64.85~14.04.1
    • 4.4.0-66.87~14.04.1
    • 4.4.0-67.88~14.04.1
    • 4.4.0-70.91~14.04.1
    • 4.4.0-71.92~14.04.1
    • 4.4.0-72.93~14.04.1
    • 4.4.0-75.96~14.04.1
    • 4.4.0-78.99~14.04.2
    • 4.4.0-79.100~14.04.1
    • 4.4.0-81.104~14.04.1
    • 4.4.0-83.106~14.04.1
    • 4.4.0-87.110~14.04.1
    • 4.4.0-89.112~14.04.1
    • 4.4.0-91.114~14.04.1
    • 4.4.0-92.115~14.04.1
    • 4.4.0-93.116~14.04.1
    • 4.4.0-96.119~14.04.1
    • 4.4.0-97.120~14.04.1
    • 4.4.0-98.121~14.04.1
    • 4.4.0-101.124~14.04.1
    • 4.4.0-103.126~14.04.1
    • 4.4.0-104.127~14.04.1
    • 4.4.0-108.131~14.04.1
    • 4.4.0-109.132~14.04.1
    • 4.4.0-111.134~14.04.1
    • 4.4.0-112.135~14.04.1
    • 4.4.0-116.140~14.04.1
    • 4.4.0-119.143~14.04.1
    • 4.4.0-121.145~14.04.1
    • 4.4.0-124.148~14.04.1
    • 4.4.0-127.153~14.04.1
    • 4.4.0-128.154~14.04.1
    • 4.4.0-130.156~14.04.1
    • 4.4.0-131.157~14.04.1
    • 4.4.0-133.159~14.04.1
    • 4.4.0-134.160~14.04.1
    • 4.4.0-135.161~14.04.1
    • 4.4.0-137.163~14.04.1
    • 4.4.0-138.164~14.04.1
    • 4.4.0-139.165~14.04.1
    • 4.4.0-140.166~14.04.1
    • 4.4.0-141.167~14.04.1
    • 4.4.0-142.168~14.04.1
    • 4.4.0-143.169~14.04.2
    • 4.4.0-144.170~14.04.1
    • 4.4.0-146.172~14.04.1
    • 4.4.0-148.174~14.04.1
    • 4.4.0-150.176~14.04.1
    • 4.4.0-151.178~14.04.1
    • 4.4.0-154.181~14.04.1
    • 4.4.0-157.185~14.04.1
    • 4.4.0-159.187~14.04.1
    • 4.4.0-161.189~14.04.1
    • 4.4.0-164.192~14.04.1
    • 4.4.0-165.193~14.04.1
    • 4.4.0-166.195~14.04.1
    • 4.4.0-168.197~14.04.1
    • 4.4.0-169.198~14.04.1
    Affected ranges
    • ECOSYSTEM: < 4.4.0-170.199~14.04.1

    Update to 4.4.0-170.199~14.04.1

  • linux-hwe-edge Ubuntu:16.04:LTS

    Versions
    • 4.8.0-28.30~16.04.1
    • 4.8.0-30.32~16.04.1
    • 4.8.0-32.34~16.04.1
    • 4.8.0-34.36~16.04.1
    • 4.10.0-14.16~16.04.1
    • 4.10.0-19.21~16.04.1
    • 4.10.0-20.22~16.04.1
    • 4.10.0-21.23~16.04.1
    • 4.10.0-22.24~16.04.1
    • 4.10.0-24.28~16.04.1
    • 4.10.0-26.30~16.04.1
    • 4.11.0-13.19~16.04.1
    • 4.11.0-14.20~16.04.1
    • 4.13.0-16.19~16.04.3
    • 4.13.0-17.20~16.04.1
    • 4.13.0-19.22~16.04.1
    • 4.13.0-21.24~16.04.1
    • 4.13.0-25.29~16.04.2
    • 4.15.0-13.14~16.04.1
    • 4.15.0-15.16~16.04.1
    • 4.15.0-20.21~16.04.1
    • 4.15.0-22.24~16.04.1
    • 4.15.0-23.25~16.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-fips Ubuntu:Pro:FIPS-updates:16.04:LTS

    Versions
    • 4.4.0-1003.3
    • 4.4.0-1005.5
    • 4.4.0-1006.6
    • 4.4.0-1008.10
    • 4.4.0-1010.13
    • 4.4.0-1011.14
    • 4.4.0-1012.16
    • 4.4.0-1013.17
    • 4.4.0-1015.20
    • 4.4.0-1017.22
    • 4.4.0-1019.24
    • 4.4.0-1021.26
    • 4.4.0-1022.27
    • 4.4.0-1023.28
    • 4.4.0-1025.30
    Affected ranges
    • ECOSYSTEM: < 4.4.0-1026.31

    Update to 4.4.0-1026.31

  • linux-fips Ubuntu:Pro:FIPS:16.04:LTS

    Versions
    • 4.4.0-1001.1
    • 4.4.0-1002.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-azure-edge Ubuntu:18.04:LTS

    Versions
    • 4.18.0-1006.6~18.04.1
    • 4.18.0-1007.7~18.04.1
    • 4.18.0-1008.8~18.04.1
    • 5.0.0-1012.12~18.04.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-gcp-edge Ubuntu:18.04:LTS

    Versions
    • 4.18.0-1004.5~18.04.1
    • 4.18.0-1005.6~18.04.1
    • 4.18.0-1006.7~18.04.1
    • 4.18.0-1007.8~18.04.1
    • 4.18.0-1008.9~18.04.1
    • 4.18.0-1009.10~18.04.1
    • 4.18.0-1011.12~18.04.1
    • 4.18.0-1012.13~18.04.1
    • 4.18.0-1013.14~18.04.1
    • 4.18.0-1015.16~18.04.1
    • 5.0.0-1011.11~18.04.1
    • 5.0.0-1013.13~18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-aws-fips Ubuntu:Pro:FIPS-updates:18.04:LTS

    Versions
    • 4.15.0-2000.4
    Affected ranges
    • ECOSYSTEM: < 4.15.0-2018.18

    Update to 4.15.0-2018.18

  • linux-azure-fips Ubuntu:Pro:FIPS-updates:18.04:LTS

    Versions
    • 4.15.0-1002.2
    Affected ranges
    • ECOSYSTEM: < 4.15.0-2006.7

    Update to 4.15.0-2006.7

  • linux-aws-fips Ubuntu:Pro:FIPS:18.04:LTS

    Versions
    • 4.15.0-2000.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-azure-fips Ubuntu:Pro:FIPS:18.04:LTS

    Versions
    • 4.15.0-1002.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-gcp-fips Ubuntu:Pro:FIPS:18.04:LTS

    Versions
    • 4.15.0-1001.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-azure-fde Ubuntu:20.04:LTS

    Versions
    • 5.4.0-1063.66+cvm2.2
    • 5.4.0-1063.66+cvm3.2
    • 5.4.0-1064.67+cvm1.1
    • 5.4.0-1065.68+cvm2.1
    • 5.4.0-1067.70+cvm1.1
    • 5.4.0-1068.71+cvm1.1
    • 5.4.0-1069.72+cvm1.1
    • 5.4.0-1070.73+cvm1.1
    • 5.4.0-1072.75+cvm1.1
    • 5.4.0-1073.76+cvm1.1
    • 5.4.0-1074.77+cvm1.1
    • 5.4.0-1076.79+cvm1.1
    • 5.4.0-1078.81+cvm1.1
    • 5.4.0-1080.83+cvm1.1
    • 5.4.0-1083.87+cvm1.1
    • 5.4.0-1085.90+cvm1.1
    • 5.4.0-1085.90+cvm2.1
    • 5.4.0-1086.91+cvm1.1
    • 5.4.0-1089.94+cvm1.2
    • 5.4.0-1090.95+cvm1.1
    • 5.4.0-1091.96+cvm1.1
    • 5.4.0-1092.97+cvm1.1
    • 5.4.0-1095.101+cvm1.1
    • 5.4.0-1098.104+cvm1.1
    • 5.4.0-1100.106+cvm1.1
    • 5.4.0-1103.109+cvm1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-gke Ubuntu:20.04:LTS

    Versions
    • 5.4.0-1033.35
    • 5.4.0-1035.37
    • 5.4.0-1036.38
    • 5.4.0-1037.39
    • 5.4.0-1039.41
    • 5.4.0-1041.43
    • 5.4.0-1042.44
    • 5.4.0-1043.45
    • 5.4.0-1044.46
    • 5.4.0-1046.48
    • 5.4.0-1049.52
    • 5.4.0-1051.54
    • 5.4.0-1052.55
    • 5.4.0-1053.56
    • 5.4.0-1054.57
    • 5.4.0-1055.58
    • 5.4.0-1056.59
    • 5.4.0-1057.60
    • 5.4.0-1059.62
    • 5.4.0-1061.64
    • 5.4.0-1062.65
    • 5.4.0-1063.66
    • 5.4.0-1065.68
    • 5.4.0-1066.69
    • 5.4.0-1067.70
    • 5.4.0-1068.71
    • 5.4.0-1071.76
    • 5.4.0-1072.77
    • 5.4.0-1074.79
    • 5.4.0-1076.82
    • 5.4.0-1078.84
    • 5.4.0-1080.86
    • 5.4.0-1081.87
    • 5.4.0-1083.89
    • 5.4.0-1084.90
    • 5.4.0-1086.93
    • 5.4.0-1087.94
    • 5.4.0-1090.97
    • 5.4.0-1091.98
    • 5.4.0-1094.101
    • 5.4.0-1095.102
    • 5.4.0-1096.103
    • 5.4.0-1097.104
    • 5.4.0-1098.105
    • 5.4.0-1099.106
    • 5.4.0-1100.107
    • 5.4.0-1101.108
    • 5.4.0-1102.109
    • 5.4.0-1103.110
    • 5.4.0-1104.111
    • 5.4.0-1105.112
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-riscv Ubuntu:20.04:LTS

    Versions
    • 5.4.0-24.28
    • 5.4.0-26.30
    • 5.4.0-27.31
    • 5.4.0-28.32
    • 5.4.0-30.34
    • 5.4.0-31.35
    • 5.4.0-33.37
    • 5.4.0-34.38
    • 5.4.0-36.41
    • 5.4.0-37.42
    • 5.4.0-39.44
    • 5.4.0-40.45
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-intel-iot-realtime Ubuntu:22.04:LTS

    Versions
    • 5.15.0-1073.75
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-realtime Ubuntu:22.04:LTS

    Versions
    • 5.15.0-1032.35
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-riscv Ubuntu:22.04:LTS

    Versions
    • 5.13.0-1004.4
    • 5.13.0-1006.6+22.04.1
    • 5.13.0-1007.7+22.04.1
    • 5.13.0-1010.11+22.04.1
    • 5.15.0-1004.4
    • 5.15.0-1005.5
    • 5.15.0-1006.6
    • 5.15.0-1007.7
    • 5.15.0-1008.8
    • 5.15.0-1011.12
    • 5.15.0-1012.13
    • 5.15.0-1014.16
    • 5.15.0-1015.17
    • 5.15.0-1016.18
    • 5.15.0-1017.19
    • 5.15.0-1018.21
    • 5.15.0-1019.22
    • 5.15.0-1020.23
    • 5.15.0-1022.26
    • 5.15.0-1023.27
    • 5.15.0-1026.30
    • 5.15.0-1027.31
    • 5.15.0-1028.32
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • linux-raspi-realtime Ubuntu:24.04:LTS

    Versions
    • 6.8.0-2019.20
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →