Debian/linux: high 7.5
In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.
Action: Upgrade linux to 4.19.37-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.19.37-1 | - |
Fixed versions
| 4.19.37-1 |
Sources
- osv: DEBIAN-CVE-2019-16995#Debian:14/linux
- https://security-tracker.debian.org/tracker/CVE-2019-16995
published · modified · JSON