CVE-2019-20095

A flaw was found in the Linux kernel’s mwifiex driver implementation when connecting to other WiFi devices in “Test Mode.” A kernel memory leak can occur if an error condition is met during the parameter negotiation. This issue can lead to a denial of service if multiple error conditions meeting the repeated connection attempts are attempted.

Mitigation

As connecting to a wireless device is not automatic and initiated by a user, not connecting to rogue access points would prevent this flaw from being abused.