VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 7, 2019· Updated Aug 5, 2024

CVE-2019-18808

CVE-2019-18808

Description

A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.

Affected products

84

Patches

1
128c66429247

crypto: ccp - Release all allocated memory if sha type is invalid

https://github.com/torvalds/linuxNavid EmamdoostSep 19, 2019via osv
commit
1 file changed · +2 −1
  • drivers/crypto/ccp/ccp-ops.c+2 −1 modified
    @@ -1777,8 +1777,9 @@ ccp_run_sha_cmd(struct ccp_cmd_queue *cmd_q, struct ccp_cmd *cmd)
 			       LSB_ITEM_SIZE);
 			break;
 		default:
+			kfree(hmac_buf);
 			ret = -EINVAL;
-			goto e_ctx;
+			goto e_data;
 		}
 
 		memset(&hmac_cmd, 0, sizeof(hmac_cmd));

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

8

News mentions

0

No linked articles in our index yet.