Search/CVE-2019-19052
● CVE — High

CVE-2019-19052

Vendordebian, linux, canonical, opensuse, netappProductdebian linux, linux kernel, ubuntu linux, leap, active iq unified manager, cloud backup, e-series santricity os controller, steelstore cloud integrated storage, fas/aff baseboard management controller, sd-wan edge, solidfire & hci management node, data availability services, solidfire baseboard management controller firmware, brocade fabric operating system firmware, aff baseboard management controller, hci baseboard management controller, hci compute node firmware, solidfire, enterprise sds & hci storage nodeDiscoveredNov 18, 2019UpdatedNov 21, 2024

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.

CVSS v3.1
7.5 HIGH
EPSS
5.23%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Nov 18, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024