UBUNTU-CVE-2019-19065
A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures, aka CID-34b3be18a04e. NOTE: This has been disputed as not a vulnerability because "rhashtable_init() can only fail if it is passed invalid values in the second parameter's struct, but when invoked from sdma_init() that is a pointer to a static const struct, so an attacker could only trigger failure if they could corrupt kernel memory (in which case a small memory leak is not a significant problem).
02 / AFFECTED SOFTWARE
Affected packages
29 explicit affected versions
2 explicit affected versions
11 explicit affected versions
6 explicit affected versions
35 explicit affected versions
17 explicit affected versions
1 explicit affected versions
41 explicit affected versions
23 explicit affected versions
1 explicit affected versions
1 explicit affected versions
2 explicit affected versions
12 explicit affected versions
1 explicit affected versions
9 explicit affected versions
10 explicit affected versions
17 explicit affected versions
15 explicit affected versions
1 explicit affected versions
34 explicit affected versions
1 explicit affected versions
13 explicit affected versions
23 explicit affected versions
11 explicit affected versions
36 explicit affected versions
41 explicit affected versions
51 explicit affected versions
48 explicit affected versions
1 explicit affected versions
1 explicit affected versions
18 explicit affected versions
38 explicit affected versions
1 explicit affected versions
26 explicit affected versions
33 explicit affected versions
62 explicit affected versions
25 explicit affected versions
20 explicit affected versions
12 explicit affected versions
4 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures, aka CID-34b3be18a04e. NOTE: This has been disputed as not a vulnerability because "rhashtable_init() can only fail if it is passed invalid values in the second parameter's struct, but when invoked from sdma_init() that is a pointer to a static const struct, so an attacker could only trigger failure if they could corrupt kernel memory (in which case a small memory leak is not a significant problem).
05 / REFERENCES
Further evidence
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9
- https://github.com/torvalds/linux/commit/34b3be18a04ecdc610aae4c48e5d1b799d8689f6
- https://ubuntu.com/security/CVE-2019-19065
- https://ubuntu.com/security/notices/USN-4208-1
- https://ubuntu.com/security/notices/USN-4210-1
- https://ubuntu.com/security/notices/USN-4226-1
- https://www.cve.org/CVERecord?id=CVE-2019-19065