{"id":"CVE-2019-18811","aliases":["ALSA-2021:1578","BELL-CVE-2019-18811","DEBIAN-CVE-2019-18811","EUVD-2019-8515","GHSA-grcg-hjg8-mrhw","RHSA-2021:1578","UBUNTU-CVE-2019-18811","USN-4284-1"],"status":"published","title":"A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux...","description":"A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00393,"percentile":0.33951,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2019-11-07T15:29:19Z","modified":"2026-10-29T11:12:04Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["5.3.15-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["5.3.15-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["5.3.15-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","fixed_in":["5.3.0-1013.14~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","fixed_in":["5.3.0-1012.13~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-5.3","fixed_in":["5.3.0-1012.13~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","fixed_in":["5.3.0-40.32~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"linux-raspi2-5.3","fixed_in":["5.3.0-1018.20~18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.15-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.15-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.15-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-305.el8"}]}],"bundled":31},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-1013.14~18.04.1"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-1012.13~18.04.1"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-1012.13~18.04.1"}]}],"versions":["5.3.0-1011.12~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-40.32~18.04.1"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-raspi2-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-1018.20~18.04.1"}]}],"versions":["5.3.0-1017.19~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1004.5~18.04.1","4.18.0-1005.6~18.04.1","4.18.0-1006.7~18.04.1","4.18.0-1007.8~18.04.1","4.18.0-1008.9~18.04.1","4.18.0-1009.10~18.04.1","4.18.0-1011.12~18.04.1","4.18.0-1012.13~18.04.1","4.18.0-1013.14~18.04.1","4.18.0-1015.16~18.04.1","5.0.0-1011.11~18.04.1","5.0.0-1013.13~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1008.9","5.4.0-1009.10","5.4.0-1010.11","5.4.0-1011.12","5.4.0-1012.13","5.4.0-1013.14","5.4.0-1014.15","5.4.0-1015.16","5.4.0-1016.17","5.4.0-1018.19","5.4.0-1021.22","5.4.0-1022.23","5.4.0-1023.24","5.4.0-1024.25","5.4.0-1025.26","5.4.0-1026.27","5.4.0-1027.28","5.4.0-1029.30","5.4.0-1031.32","5.4.0-1032.33","5.4.0-1033.34","5.4.0-1034.35","5.4.0-1036.37","5.4.0-1037.38","5.4.0-1038.39","5.4.0-1039.40","5.4.0-1040.41","5.4.0-1043.44","5.4.0-1046.48","5.4.0-1048.51","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1056.60","5.4.0-1057.61","5.4.0-1060.64","5.4.0-1061.65","5.4.0-1062.66","5.4.0-1064.68","5.4.0-1065.69","5.4.0-1066.70","5.4.0-1067.71","5.4.0-1068.72","5.4.0-1069.73","5.4.0-1070.74","5.4.0-1071.75","5.4.0-1072.76","5.4.0-1073.77","5.4.0-1074.78","5.4.0-1075.79","5.4.0-1076.80","5.4.0-1077.81","5.4.0-1078.82","5.4.0-1079.83","5.4.0-1080.84","5.4.0-1081.85","5.4.0-1083.87","5.4.0-1084.88","5.4.0-1085.89","5.4.0-1086.90","5.4.0-1087.91","5.4.0-1088.92","5.4.0-1089.93","5.4.0-1090.94","5.4.0-1091.95","5.4.0-1092.96","5.4.0-1093.97","5.4.0-1094.98","5.4.0-1095.99","5.4.0-1096.100","5.4.0-1097.101","5.4.0-1098.102","5.4.0-1099.103","5.4.0-1100.104","5.4.0-1101.105","5.4.0-1102.106"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gkeop-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1003.5~20.04.2","5.15.0-1005.7~20.04.1","5.15.0-1007.10~20.04.1","5.15.0-1008.12~20.04.1","5.15.0-1011.15~20.04.2","5.15.0-1012.16~20.04.1","5.15.0-1013.17~20.04.1","5.15.0-1015.19~20.04.1","5.15.0-1016.21~20.04.1","5.15.0-1017.22~20.04.1","5.15.0-1018.23~20.04.1","5.15.0-1019.24~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1021.26~20.04.1","5.15.0-1022.27~20.04.1","5.15.0-1023.28~20.04.1","5.15.0-1024.29~20.04.1","5.15.0-1025.30~20.04.1","5.15.0-1026.31~20.04.1","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1030.35~20.04.1","5.15.0-1031.37~20.04.1","5.15.0-1032.38~20.04.1","5.15.0-1033.39~20.04.1","5.15.0-1034.40~20.04.1","5.15.0-1035.41~20.04.1","5.15.0-1036.42~20.04.1","5.15.0-1037.43~20.04.1","5.15.0-1038.44~20.04.1","5.15.0-1039.45~20.04.1","5.15.0-1040.46~20.04.1","5.15.0-1043.50~20.04.1","5.15.0-1044.51~20.04.1","5.15.0-1045.52~20.04.1","5.15.0-1046.53~20.04.1","5.15.0-1047.54~20.04.1","5.15.0-1048.55~20.04.1","5.15.0-1049.56~20.04.1","5.15.0-1050.57~20.04.1","5.15.0-1051.58~20.04.1","5.15.0-1052.59~20.04.1","5.15.0-1053.60~20.04.1","5.15.0-1054.61~20.04.1","5.15.0-1055.62~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.0-2019.20"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-1013.14~18.04.1"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1"],"bundled":23},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-1012.13~18.04.1"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1"],"bundled":23},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-40.32~18.04.1"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1"],"bundled":23},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-raspi2-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-1018.20~18.04.1"}]}],"versions":["5.3.0-1017.19~18.04.1"],"bundled":23}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"linux","product":"linux_kernel"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://github.com/torvalds/linux/commit/45c1380358b12bf2d1db20a5874e9544f56b34ab","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://security.netapp.com/advisory/ntap-20191205-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4284-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18811","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/"},{"url":"https://github.com/advisories/GHSA-grcg-hjg8-mrhw"},{"url":"https://vulners.com/cve/CVE-2019-18811","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19523","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-19528","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-0431","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-11608","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-12114","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-12362","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-12363","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-12364","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-12464","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-14314","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-14356","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-15437","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-24394","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-25212","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-25284","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-25285","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-25643","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-25704","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-27786","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-27835","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-28974","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-35508","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-36322","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-0342","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-0605","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-18811","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-18811","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1578","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1783434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1783507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1833445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848652","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1869141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1873759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1876840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882594","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1890373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1900933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1911343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1949560","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1578.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-18811","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18811","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19523","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19523","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19523","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19528","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19528","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19528","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-0431","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-0431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0431","tags":["advisory"]},{"url":"https://patchwork.kernel.org/project/linux-input/patch/20191207210518.GA181006@dtor-ws/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11608","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11608","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-12114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12114","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-12362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-12363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930249","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12363","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-12364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12364","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-12464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12464","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14314","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14314","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14314","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5872331b3d91820e14716632ebb56b1399b34fe1","tags":["article"]},{"url":"https://lore.kernel.org/linux-ext4/f53e246b-647c-64bb-16ec-135383c70ad7@redhat.com/T/#u","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14356","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14356","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14356","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15437","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24394","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24394","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24394","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25212","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25212","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25212","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25284","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25284","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25284","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25285","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25285","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25285","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25643","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25643","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=66d42ed8b25b64eb63111a2b8582c5afc8bf1105","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883988","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25704","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25704","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7bdb157cdebbf95a1cd94ed2e01b338714075d00","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2020/11/09/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27786","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27786","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c1f6e3c818dd734c30f6a7eeebf232ba2cf3181d","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27835","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27835","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27835","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28974","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28974","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-35508","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-35508","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35508","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36322","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36322","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d069dbe8aaf2a197142558b6fb2978189ba3454","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2112688","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36557","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36557","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca4463bf8438b403596edd0ec961ca0d4fbe0220","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36694","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36694","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc00bcaa589914096edef7fb87ca5cee4a166b5c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-0342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-0342","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0342","tags":["advisory"]},{"url":"https://lore.kernel.org/netdev/20200608230607.3361041-84-sashal@kernel.org/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-0605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974823","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-0605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0605","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936786","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3428","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3428","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178212","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1390","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1390","tags":["advisory"]},{"url":"https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5","tags":["article"]},{"url":"https://infosec.exchange/@_mattata/109427999461122360","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2019-18811","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4284-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-14615","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-18683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-18786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19050","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19057","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19602","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19965","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-18811","description":"A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.","status":"published","published":"2019-11-07T15:29:19Z","modified":"2024-08-05T02:02:39.755Z","updated_at":"2026-11-02T14:32:23.803059Z"}],"euvd":[{"id":"EUVD-2019-8515","description":"A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.","status":"published","published":"2019-11-07T15:29:19Z","modified":"2024-08-05T02:02:39Z","updated_at":"2026-11-03T02:40:27.303586Z"}],"ghsa":[{"id":"GHSA-grcg-hjg8-mrhw","title":"A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux...","description":"A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.","status":"published","published":"2022-05-24T17:00:39Z","modified":"2023-01-28T05:07:38Z","updated_at":"2026-11-02T14:44:33.090384Z"}],"nvd":[{"id":"CVE-2019-18811","description":"A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.","status":"published","published":"2019-11-07T16:15:11.563Z","modified":"2026-06-17T02:25:23.02Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:05:35.052973Z"}],"osv":[{"id":"BELL-CVE-2019-18811","title":"CVE-2019-18811 does not affect BellSoft software","status":"withdrawn","published":"2019-11-07T16:15:00Z","modified":"2026-01-26T09:46:05.381639Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-18811","description":"A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.","status":"published","published":"2019-11-07T16:15:11.563Z","modified":"2026-03-15T22:27:58.605067Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-18811","description":"A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.","status":"published","published":"2019-11-07T16:15:11.563Z","modified":"2026-09-21T07:03:11.607343494Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"RHSA-2021:1578","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2024-10-01T18:20:36Z","modified":"2026-08-07T10:02:37Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"UBUNTU-CVE-2019-18811","description":"A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.","status":"published","published":"2019-11-07T16:15:00Z","modified":"2026-02-04T04:14:31.364253Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"ALSA-2021:1578","title":"Important: kernel security, bug fix, and enhancement update","description":"The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: Integer overflow in Intel(R) Graphics Drivers (CVE-2020-12362)\n\n* kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c (CVE-2019-18811)\n\n* kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver (CVE-2019-19523)\n\n* kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (CVE-2019-19528)\n\n* kernel: possible out of bounds write in kbd_keycode of keyboard.c (CVE-2020-0431)\n\n* kernel: DoS by corrupting mountpoint reference counter (CVE-2020-12114)\n\n* kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c (CVE-2020-12464)\n\n* kernel: buffer uses out of index in ext3/4 filesystem (CVE-2020-14314)\n\n* kernel: Use After Free vulnerability in cgroup BPF component (CVE-2020-14356)\n\n* kernel: NULL pointer dereference in serial8250_isa_init_ports function in drivers/tty/serial/8250/8250_core.c (CVE-2020-15437)\n\n* kernel: umask not applied on filesystem without ACL support (CVE-2020-24394)\n\n* kernel: TOCTOU mismatch in the NFS client code (CVE-2020-25212)\n\n* kernel: incomplete permission checking for access to rbd devices (CVE-2020-25284)\n\n* kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c (CVE-2020-25285)\n\n* kernel: improper input validation in ppp_cp_parse_cr function leads to memory corruption and read overflow (CVE-2020-25643)\n\n* kernel: perf_event_parse_addr_filter memory (CVE-2020-25704)\n\n* kernel: use-after-free in kernel midi subsystem (CVE-2020-27786)\n\n* kernel: child process is able to access parent mm through hfi dev file handle (CVE-2020-27835)\n\n* kernel: slab-out-of-bounds read in fbcon (CVE-2020-28974)\n\n* kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting -\u003ereal_parent (CVE-2020-35508)\n\n* kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations (CVE-2020-36322)\n\n* kernel: use after free in tun_get_user of tun.c could lead to local escalation of privilege (CVE-2021-0342)\n\n* kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c (CVE-2020-11608)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:33:57Z","modified":"2026-10-29T11:12:04.508628428Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"USN-4284-1","title":"linux, linux-aws, linux-azure, linux-azure-5.3, linux-gcp, linux-gcp-5.3, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-raspi2-5.3 vulnerabilities","description":"It was discovered that the Linux kernel did not properly clear data\nstructures on context switches for certain Intel graphics processors. A\nlocal attacker could use this to expose sensitive information.\n(CVE-2019-14615)\n\nIt was discovered that the Atheros 802.11ac wireless USB device driver in\nthe Linux kernel did not properly validate device metadata. A physically\nproximate attacker could use this to cause a denial of service (system\ncrash). (CVE-2019-15099)\n\nIt was discovered that the HSA Linux kernel driver for AMD GPU devices did\nnot properly check for errors in certain situations, leading to a NULL\npointer dereference. A local attacker could possibly use this to cause a\ndenial of service. (CVE-2019-16229)\n\nIt was discovered that the Marvell 8xxx Libertas WLAN device driver in the\nLinux kernel did not properly check for errors in certain situations,\nleading to a NULL pointer dereference. A local attacker could possibly use\nthis to cause a denial of service. (CVE-2019-16232)\n\nIt was discovered that a race condition existed in the Virtual Video Test\nDriver in the Linux kernel. An attacker with write access to /dev/video0 on\na system with the vivid module loaded could possibly use this to gain\nadministrative privileges. (CVE-2019-18683)\n\nIt was discovered that the Renesas Digital Radio Interface (DRIF) driver in\nthe Linux kernel did not properly initialize data. A local attacker could\npossibly use this to expose sensitive information (kernel memory).\n(CVE-2019-18786)\n\nIt was discovered that the Sound Open Firmware (SOF) driver in the Linux\nkernel did not properly deallocate memory in certain error conditions. A\nlocal attacker could use this to cause a denial of service (kernel memory\nexhaustion). (CVE-2019-18811)\n\nIt was discovered that the crypto subsystem in the Linux kernel did not\nproperly deallocate memory in certain error conditions. A local attacker\ncould use this to cause a denial of service (kernel memory exhaustion).\n(CVE-2019-19050, CVE-2019-19062)\n\nIt was discovered that multiple memory leaks existed in the Marvell WiFi-Ex\nDriver for the Linux kernel. A local attacker could possibly use this to\ncause a denial of service (kernel memory exhaustion). (CVE-2019-19057)\n\nIt was discovered that the Realtek rtlwifi USB device driver in the Linux\nkernel did not properly deallocate memory in certain error conditions. A\nlocal attacker could possibly use this to cause a denial of service (kernel\nmemory exhaustion). (CVE-2019-19063)\n\nIt was discovered that the RSI 91x WLAN device driver in the Linux kernel\ndid not properly deallocate memory in certain error conditions. A local\nattacker could use this to cause a denial of service (kernel memory\nexhaustion). (CVE-2019-19071)\n\nIt was discovered that the Broadcom Netxtreme HCA device driver in the\nLinux kernel did not properly deallocate memory in certain error\nconditions. A local attacker could possibly use this to cause a denial of\nservice (kernel memory exhaustion). (CVE-2019-19077)\n\nIt was discovered that the Atheros 802.11ac wireless USB device driver in\nthe Linux kernel did not properly deallocate memory in certain error\nconditions. A local attacker could possibly use this to cause a denial of\nservice (kernel memory exhaustion). (CVE-2019-19078)\n\nIt was discovered that the AMD GPU device drivers in the Linux kernel did\nnot properly deallocate memory in certain error conditions. A local\nattacker could use this to possibly cause a denial of service (kernel\nmemory exhaustion). (CVE-2019-19082)\n\nIt was discovered that the IO uring implementation in the Linux kernel did\nnot properly perform credentials checks in certain situations. A local\nattacker could possibly use this to gain administrative privileges.\n(CVE-2019-19241)\n\nOr Cohen discovered that the virtual console subsystem in the Linux kernel\ndid not properly restrict writes to unimplemented vcsu (unicode) devices. A\nlocal attacker could possibly use this to cause a denial of service (system\ncrash) or have other unspecified impacts. (CVE-2019-19252)\n\nIt was discovered that the KVM hypervisor implementation in the Linux\nkernel did not properly handle ioctl requests to get emulated CPUID\nfeatures. An attacker with access to /dev/kvm could use this to cause a\ndenial of service (system crash). (CVE-2019-19332)\n\nIt was discovered that a race condition existed in the Linux kernel on x86\nplatforms when keeping track of which process was assigned control of the\nFPU. A local attacker could use this to cause a denial of service (memory\ncorruption) or possibly gain administrative privileges. (CVE-2019-19602)\n\nIt was discovered that the ext4 file system implementation in the Linux\nkernel did not properly handle certain conditions. An attacker could use\nthis to specially craft an ext4 file system that, when mounted, could cause\na denial of service (system crash) or possibly execute arbitrary code.\n(CVE-2019-19767)\n\nIt was discovered that the Kvaser CAN/USB driver in the Linux kernel did\nnot properly initialize memory in certain situations. A local attacker\ncould possibly use this to expose sensitive information (kernel memory).\n(CVE-2019-19947)\n\nGao Chuan discovered that the SAS Class driver in the Linux kernel\ncontained a race condition that could lead to a NULL pointer dereference. A\nlocal attacker could possibly use this to cause a denial of service (system\ncrash). (CVE-2019-19965)\n\nIt was discovered that the B2C2 FlexCop USB device driver in the Linux\nkernel did not properly validate device metadata. A physically proximate\nattacker could use this to cause a denial of service (system crash).\n(CVE-2019-15291)\n","status":"published","published":"2020-02-19T08:33:45Z","modified":"2026-09-07T14:06:04.028310553Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}