Bug 1156277 – VUL-1: CVE-2019-18812: kernel-source: memory leak in sof_dfsentry_write() from sound/soc/sof/debug.c

Bug 1156277 - (CVE-2019-18812) VUL-1: CVE-2019-18812: kernel-source: memory leak in sof_dfsentry_write() from sound/soc/sof/debug.c

(CVE-2019-18812)
Summary:	VUL-1: CVE-2019-18812: kernel-source: memory leak in sof_dfsentry_write() fro...

Status:	RESOLVED FIXED

Classification:	Novell Products
Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents
Version:	unspecified
Hardware:	Other Other

Priority:	P4 - Low Severity: Minor
Target Milestone:	---
Assigned To:	Security Team bot
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/246716/
Whiteboard:	CVSSv2:NVD:CVE-2019-18812:7.8:(AV:N/...
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2019-11-08 09:46 UTC by Robert Frohl
Modified:	2022-12-23 11:40 UTC (History)
CC List:	3 users (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Robert Frohl 2019-11-08 09:46:18 UTC

CVE-2019-18812

A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in
the Linux kernel through 5.3.9 allows attackers to cause a denial of service
(memory consumption), aka CID-c0a333d842ef.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-18812
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18812
https://github.com/torvalds/linux/commit/c0a333d842ef67ac04adc72ff79dc1ccc3dca4ed

Comment 1 Takashi Iwai 2019-11-08 10:06:26 UTC

The github URL is confusing...  The commit hasn't been merged to Linus tree yet but it appears as if it have been merged.

Actually the fix is in the pull request to Linus I sent a couple of hours ago, so it'll be in 5.4-rc7, hopefully.

The relevant code is found only in 5.3 or later, so only SLE15-SP2 and TW are affected.  I'll wait for Linus merging it, then backport it.

Comment 2 Takashi Iwai 2019-11-11 11:48:18 UTC

The fix pushed to both SLE15-SP2 and stable branches.

Reassigned back to security team.

Comment 3 Alexandros Toptsoglou 2020-01-20 15:34:33 UTC

done