Memory Leak Vulnerability in Linux Kernel's nl80211_get_ftm_responder_stats Function

CVE-2019-19055

Summary

The vulnerability involves a memory leak in the nl80211_get_ftm_responder_stats() function within the Linux kernel, specifically affecting versions up to 5.3.11. This flaw can be exploited by attackers to create a denial of service scenario through excessive memory consumption by triggering failures in the nl80211hdr_put() function. Although there are disputes on its relevance, it occurs during a code path where prior allocation efforts have already succeeded, indicating a potential exploitation vector for malicious activities.

References