p PatchFirst

PatchFirst · Latest vulnerabilities

linux-azure vulnerabilities · Page 12

Vulnerabilities published for linux-azure in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 630

  1. CVE-2019-19073

    Medium · CVSS 4EPSS 0.53%Fix available

    CVE-2019-19073

    Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10.

    • Update to 4.15.0-1096.106~16.04.1
    Published Updated
  2. CVE-2019-19068

    Medium · CVSS 4.6EPSS 0.45%Fix available

    CVE-2019-19068

    A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-a2cdd07488e6.

    • Update to 4.15.0-1075.80
    Published Updated
  3. CVE-2019-19067

    Medium · CVSS 4.4EPSS 0.47%Fix available

    CVE-2019-19067

    Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures, aka CID-57be09c6e874. NOTE: third parties dispute the relevance of this because the attacker must already have privileges for module loading

    • Update to 4.15.0-1096.106~16.04.1
    Published Updated
  4. CVE-2019-19065

    Medium · CVSS 4.7EPSS 0.49%Fix available

    CVE-2019-19065

    A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures, aka CID-34b3be18a04e. NOTE: This has been disputed as not a vulnerability because "rhashtable_init() can only fail if it is passed invalid values in the second parameter's struct, but when invoked from sdma_init() that is a pointer to a static const struct, so an attacker could only trigger failure if they could corrupt kernel memory (in which case a small memory leak is not a significant problem).

    • Update to 4.15.0-1064.69
    Published Updated
  5. CVE-2019-19057

    Low · CVSS 3.3EPSS 0.79%Fix available

    CVE-2019-19057

    Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.

    • Update to 4.15.0-1071.76
    Published Updated
  6. CVE-2019-19056

    Medium · CVSS 4.7EPSS 0.39%Fix available

    CVE-2019-19056

    A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-db8fd2cde932.

    • Update to 4.15.0-1075.80
    Published Updated
  7. CVE-2019-19046

    Medium · CVSS 6.5EPSS 3.16%Fix available

    CVE-2019-19046

    A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time

    • Update to 4.15.0-1075.80
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →