CVEvulnerability

CVE-2019-19947

4.6 MEDIUM Published 2019-12-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-12-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-908

Description

In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.

Affected configurations

• linux linux kernel (<= 5.4.6) • debian debian linux 8.0 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 19.10 • netapp active iq unified manager • netapp cloud backup • netapp data availability services • netapp e-series santricity os controller (>= 11.0 <= 11.70.2) • netapp fas\/aff baseboard management controller • netapp hci baseboard management controller h610s • netapp solidfire \& hci management node • netapp steelstore cloud integrated storage • netapp aff baseboard management controller a700s • netapp solidfire baseboard management controller

Related

Weakness · CWE (1)

  • CWE-908 Use of Uninitialized Resource weakness

References