Search/CVE-2019-20095
● CVE — Medium

CVE-2019-20095

Vendorlinux, netapp, opensuseProductlinux kernel, h610s firmware, leap, active iq unified manager, cloud backup, e-series santricity os controller, steelstore cloud integrated storage, solidfire, hci management node, a700s firmware, data availability services, 8300 firmware, 8700 firmware, a400 firmwareDiscoveredDec 30, 2019UpdatedNov 21, 2024

mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. This will cause a memory leak and denial of service.

View graph Watch Export
CVSS v3.1
5.5 MEDIUM
EPSS
0.39%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Connections
15 relationships
Timeline
disclosure → media coverage
Dec 30, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024