Memory Leak Vulnerability in Linux Kernel's nl80211_get_ftm_responder_stats Function
CVE-2019-19055
5.5MEDIUM
Key Information:
- Vendor
Canonical
- Vendor
- CVE Published:
- 18 November 2019
What is CVE-2019-19055?
The vulnerability involves a memory leak in the nl80211_get_ftm_responder_stats() function within the Linux kernel, specifically affecting versions up to 5.3.11. This flaw can be exploited by attackers to create a denial of service scenario through excessive memory consumption by triggering failures in the nl80211hdr_put() function. Although there are disputes on its relevance, it occurs during a code path where prior allocation efforts have already succeeded, indicating a potential exploitation vector for malicious activities.