High severity7.5NVD Advisory· Published Nov 7, 2019· Updated Jun 17, 2026

CVE-2019-18807

Description

Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by triggering static_config_buf_prepare_for_upload() or sja1105_inhibit_tx() failures, aka CID-68501df92d11.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <5.3.5
- (no CPE)range: <5.3.5
Linux/Linux kerneldescription

Patches

Vulnerability mechanics

References

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvdMailing ListPatchVendor Advisory
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.5nvdMailing ListVendor Advisory
security.netapp.com/advisory/ntap-20191205-0001/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000