VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 7, 2019· Updated Aug 5, 2024

CVE-2019-18809

CVE-2019-18809

Description

A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.

Affected products

89

Patches

1
2289adbfa559

media: usb: fix memory leak in af9005_identify_state

https://github.com/torvalds/linuxNavid EmamdoostOct 9, 2019via osv
commit
1 file changed · +3 −2
  • drivers/media/usb/dvb-usb/af9005.c+3 −2 modified
    @@ -976,8 +976,9 @@ static int af9005_identify_state(struct usb_device *udev,
 	else if (reply == 0x02)
 		*cold = 0;
 	else
-		return -EIO;
-	deb_info("Identify state cold = %d\n", *cold);
+		ret = -EIO;
+	if (!ret)
+		deb_info("Identify state cold = %d\n", *cold);
 
 err:
 	kfree(buf);

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

10

News mentions

0

No linked articles in our index yet.