K06554372 : Linux kernel vulnerability CVE-2019-19059

Security Advisory Description

Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa. (CVE-2019-19059)

Impact

An attacker may be able to trigger a denial-of-service (DoS) attack on the system by way of causing memory exhaustion when the vulnerability is exploited.