CVE-2019-20095
mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. This will cause a memory leak and denial of service.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2019-12-30
- Last modified
- 2026-10-08
- Weaknesses
- CWE-401
Affected products
- Linux Kernel (Linux)
- 8300 Firmware (Netapp)
- 8700 Firmware (Netapp)
- A400 Firmware (Netapp)
- A700s Firmware (Netapp)
- Active Iq Unified Manager (Netapp)
- Cloud Backup (Netapp)
- Data Availability Services (Netapp)
- E-series Santricity Os Controller (Netapp)
- H610s Firmware (Netapp)
- Hci Management Node (Netapp)
- Solidfire (Netapp)
- Steelstore Cloud Integrated Storage (Netapp)
- Leap (Opensuse)
References
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.6
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=003b686ace820ce2d635a83f10f2d7f9c147dabc
- https://security.netapp.com/advisory/ntap-20200204-0002/
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
