Linux kernel i40e_setup_macvlans () denial of service security vulnerability (CVE-2019-19043)

Linux kernel i40e_setup_macvlans () denial of service security vulnerability (CVE-2019-19043)

Release Date: 2019-11-18
Updated: 2019-11-22

Affected Systems:

Linux kernel <= 5.3.11

description:

---

CVE (CAN) ID: CVE-2019-19043

Linux Kernel is open source operating system Linux kernel used.

Linux kernel 5.3.11 and earlier versions, drivers / net / ethernet / intel / i40e / i40e_main.c in i40e_setup_macvlans () function is a memory leak vulnerability. It may lead to a denial of service (memory exhaustion).

<* Source: Vendor
  *>

suggestions:

---

Manufacturers patch:

Linux
-----
Current vendors have released an updated patch to fix the security issue, please go to the manufacturer's home page to download:

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog -5.3.8

https://github.com/torvalds/linux/commit/27d461333459d282ffa4a2bdb6b215a59d493a8f