FlawAtlas
Search the atlas
UBUNTU-CVE-2019-19050 High

UBUNTU-CVE-2019-19050

A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.

Exploit probability Not scored
Published November 18, 2019
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:20.04:LTS linux-azure-fde

26 explicit affected versions

Ubuntu:16.04:LTS linux-hwe-edge

23 explicit affected versions

Ubuntu:18.04:LTS linux-aws-5.0

3 explicit affected versions

Ubuntu:18.04:LTS linux-azure

39 explicit affected versions

Ubuntu:18.04:LTS linux-azure-5.3

5 explicit affected versions

Ubuntu:18.04:LTS linux-azure-edge

4 explicit affected versions

Ubuntu:18.04:LTS linux-gcp

34 explicit affected versions

Ubuntu:18.04:LTS linux-gcp-5.3

3 explicit affected versions

Ubuntu:18.04:LTS linux-gcp-edge

12 explicit affected versions

Ubuntu:18.04:LTS linux-gke-5.0

10 explicit affected versions

Ubuntu:18.04:LTS linux-gke-5.3

1 explicit affected versions

Ubuntu:18.04:LTS linux-hwe

22 explicit affected versions

Ubuntu:18.04:LTS linux-hwe-edge

10 explicit affected versions

Ubuntu:18.04:LTS linux-oem-osp1

12 explicit affected versions

Ubuntu:18.04:LTS linux-oracle-5.0

3 explicit affected versions

Ubuntu:18.04:LTS linux-raspi2-5.3

1 explicit affected versions

Ubuntu:20.04:LTS linux-gke

51 explicit affected versions

Ubuntu:20.04:LTS linux-gkeop

78 explicit affected versions

Ubuntu:20.04:LTS linux-gkeop-5.15

45 explicit affected versions

Ubuntu:20.04:LTS linux-raspi2

6 explicit affected versions

Ubuntu:22.04:LTS linux-intel-iot-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-riscv

23 explicit affected versions

Ubuntu:24.04:LTS linux-raspi-realtime

1 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities UBUNTU-CVE-2019-19050

A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.

View original source

05 / REFERENCES

Further evidence