CVE-2019-18812

Опубликовано: 07 нояб. 2019

Источник: ubuntu

Приоритет: negligible

EPSS Низкий

CVSS2: 7.8

CVSS3: 7.5

Описание

A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef.

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
disco	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
eoan	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra-legacy/trusty	ignored	was needs-triage ESM criteria
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra/xenial	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	ignored	end of life, was needs-triage
trusty	ignored	end of standard support
trusty/esm	ignored	end of ESM support, was ignored [was needs-triage ESM criteria]

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
disco	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
eoan	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra-legacy/trusty	ignored	was needs-triage ESM criteria
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra/xenial	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	ignored	end of ESM support, was ignored [was needs-triage ESM criteria]

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/xenial	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
disco	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
eoan	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra-legacy/trusty	ignored	was needs-triage ESM criteria
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra/xenial	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	ignored	end of ESM support, was ignored [was needs-triage ESM criteria]

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
disco	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
eoan	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra/xenial	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	needs-triage
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra/xenial	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra/xenial	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
disco	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
eoan	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra/xenial	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
precise/esm	ignored	end of life, was needs-triage
trusty	DNE
trusty/esm	DNE
upstream	needs-triage
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	ignored	was needs-triage ESM criteria
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	ignored	end of ESM support, was ignored [was needs-triage ESM criteria]
upstream	needs-triage
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
disco	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
eoan	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	needs-triage

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	DNE
disco	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
eoan	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	needs-triage
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
disco	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
eoan	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra/xenial	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
disco	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
eoan	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	needs-triage
xenial	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
devel	DNE
disco	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled
eoan	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	needs-triage
xenial	not-affected	CONFIG_SND_SOC_SOF_DEBUG_IPC_FLOOD_TEST is not enabled

Показывать по

Ссылки на источники

EPSS

Процентиль: 68%

0.00554

Низкий

7.8 High

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVE-2019-18812

CVSS3: 6.2

redhat

больше 6 лет назад

A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef.

CVE-2019-18812

CVSS3: 7.5

nvd

около 6 лет назад

A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef.

CVE-2019-18812

CVSS3: 7.5

debian

около 6 лет назад

A memory leak in the sof_dfsentry_write() function in sound/soc/sof/de ...

GHSA-gx75-jwqc-9m3h

CVSS3: 7.5

github

больше 3 лет назад

A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef.

BDU:2019-04514

CVSS3: 7.5

fstec

больше 6 лет назад

Уязвимость функции sof_dfsentry_write() (sound/soc/sof/debug.c) ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 68%

0.00554

Низкий

7.8 High

CVSS2

7.5 High

CVSS3

CVE-2019-18812

Описание

Пакет linux

Пакет linux-aws

Пакет linux-aws-hwe

Пакет linux-azure

Пакет linux-azure-edge

Пакет linux-gcp

Пакет linux-gcp-edge

Пакет linux-gke-4.15

Пакет linux-gke-5.0

Пакет linux-hwe

Пакет linux-hwe-edge

Пакет linux-kvm

Пакет linux-lts-trusty

Пакет linux-lts-xenial

Пакет linux-oem

Пакет linux-oem-osp1

Пакет linux-oracle

Пакет linux-raspi2

Пакет linux-snapdragon

Ссылки на источники

Связанные уязвимости