VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 7, 2019· Updated Aug 5, 2024

CVE-2019-18811

CVE-2019-18811

Description

A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.

Affected products

2

Patches

1
45c1380358b1

ASoC: SOF: ipc: Fix memory leak in sof_set_get_large_ctrl_data

https://github.com/torvalds/linuxNavid EmamdoostOct 27, 2019via osv
commit
1 file changed · +3 −1
  • sound/soc/sof/ipc.c+3 −1 modified
    @@ -572,8 +572,10 @@ static int sof_set_get_large_ctrl_data(struct snd_sof_dev *sdev,
 	else
 		err = sof_get_ctrl_copy_params(cdata->type, partdata, cdata,
 					       sparams);
-	if (err < 0)
+	if (err < 0) {
+		kfree(partdata);
 		return err;
+	}
 
 	msg_bytes = sparams->msg_bytes;
 	pl_size = sparams->pl_size;

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

5

News mentions

0

No linked articles in our index yet.