Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Linux Kernel Memory Leak in IMU Driver Causes Memory Consumption

CVE-2019-19061 · published 6 years ago
Summary

A memory leak in a Linux kernel driver for Inertial Measurement Units (IMUs) can cause a device to run out of memory, leading to a denial of service. This issue affects Linux kernels before version 5.3.9. To fix the issue, update to a version of the Linux kernel that is 5.3.9 or later.

What to do
  • Update canonical linux-aws to version 4.4.0-1090.94.
  • Update canonical linux-azure to version 4.15.0-1096.106~14.04.1.
  • Update canonical linux-lts-xenial to version 4.4.0-208.240~14.04.1.
  • Update canonical linux to version 4.4.0-208.240.
  • Update canonical linux-aws to version 4.4.0-1126.140.
  • Update canonical linux-aws-hwe to version 4.15.0-1083.87~16.04.1.
  • Update canonical linux-azure to version 4.15.0-1096.106~16.04.1.
  • Update canonical linux-gcp to version 4.15.0-1084.95~16.04.1.
  • Update canonical linux-hwe to version 4.15.0-118.119~16.04.1.
  • Update canonical linux-kvm to version 4.4.0-1091.100.
  • Update canonical linux-oracle to version 4.15.0-1054.58~16.04.1.
  • Update canonical linux-raspi2 to version 4.4.0-1150.161.
  • Update canonical linux-snapdragon to version 4.4.0-1154.164.
  • Update canonical linux-fips to version 4.4.0-1060.66.
  • Update canonical linux to version 4.15.0-118.119.
  • Update canonical linux-aws to version 4.15.0-1083.87.
  • Update canonical linux-azure-4.15 to version 4.15.0-1096.106.
  • Update canonical linux-azure-5.3 to version 5.3.0-1008.9~18.04.1.
  • Update canonical linux-gcp-4.15 to version 4.15.0-1084.95.
  • Update canonical linux-gcp-5.3 to version 5.3.0-1009.10~18.04.1.
  • Update canonical linux-gke-4.15 to version 4.15.0-1070.73.
  • Update canonical linux-hwe to version 5.3.0-26.28~18.04.1.
  • Update canonical linux-kvm to version 4.15.0-1075.76.
  • Update canonical linux-oem to version 4.15.0-1097.107.
  • Update canonical linux-oracle to version 4.15.0-1054.58.
  • Update canonical linux-raspi2 to version 4.15.0-1071.75.
  • Update canonical linux-snapdragon to version 4.15.0-1087.95.
  • Update canonical linux-aws-fips to version 4.15.0-2027.27.
  • Update canonical linux-azure-fips to version 4.15.0-2009.10.
  • Update canonical linux-fips to version 4.15.0-1041.46.
  • Update debian linux to version 5.3.9-1.
Affected software
Ecosystem VendorProductAffected versions
Ubuntu:Pro:14.04:LTS canonical linux-aws < 4.4.0-1090.94
Fix: upgrade to 4.4.0-1090.94
Ubuntu:Pro:14.04:LTS canonical linux-azure < 4.15.0-1096.106~14.04.1
Fix: upgrade to 4.15.0-1096.106~14.04.1
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial < 4.4.0-208.240~14.04.1
Fix: upgrade to 4.4.0-208.240~14.04.1
Ubuntu:Pro:14.04:LTS canonical linux All versions
Ubuntu:16.04:LTS canonical linux < 4.4.0-208.240
Fix: upgrade to 4.4.0-208.240
Ubuntu:16.04:LTS canonical linux-aws < 4.4.0-1126.140
Fix: upgrade to 4.4.0-1126.140
Ubuntu:16.04:LTS canonical linux-aws-hwe < 4.15.0-1083.87~16.04.1
Fix: upgrade to 4.15.0-1083.87~16.04.1
Ubuntu:16.04:LTS canonical linux-azure < 4.15.0-1096.106~16.04.1
Fix: upgrade to 4.15.0-1096.106~16.04.1
Ubuntu:16.04:LTS canonical linux-gcp < 4.15.0-1084.95~16.04.1
Fix: upgrade to 4.15.0-1084.95~16.04.1
Ubuntu:16.04:LTS canonical linux-hwe < 4.15.0-118.119~16.04.1
Fix: upgrade to 4.15.0-118.119~16.04.1
Ubuntu:16.04:LTS canonical linux-kvm < 4.4.0-1091.100
Fix: upgrade to 4.4.0-1091.100
Ubuntu:16.04:LTS canonical linux-oracle < 4.15.0-1054.58~16.04.1
Fix: upgrade to 4.15.0-1054.58~16.04.1
Ubuntu:16.04:LTS canonical linux-raspi2 < 4.4.0-1150.161
Fix: upgrade to 4.4.0-1150.161
Ubuntu:16.04:LTS canonical linux-snapdragon < 4.4.0-1154.164
Fix: upgrade to 4.4.0-1154.164
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips < 4.4.0-1060.66
Fix: upgrade to 4.4.0-1060.66
Ubuntu:18.04:LTS canonical linux < 4.15.0-118.119
Fix: upgrade to 4.15.0-118.119
Ubuntu:18.04:LTS canonical linux-aws < 4.15.0-1083.87
Fix: upgrade to 4.15.0-1083.87
Ubuntu:18.04:LTS canonical linux-azure-4.15 < 4.15.0-1096.106
Fix: upgrade to 4.15.0-1096.106
Ubuntu:18.04:LTS canonical linux-azure-5.3 < 5.3.0-1008.9~18.04.1
Fix: upgrade to 5.3.0-1008.9~18.04.1
Ubuntu:18.04:LTS canonical linux-gcp-4.15 < 4.15.0-1084.95
Fix: upgrade to 4.15.0-1084.95
Ubuntu:18.04:LTS canonical linux-gcp-5.3 < 5.3.0-1009.10~18.04.1
Fix: upgrade to 5.3.0-1009.10~18.04.1
Ubuntu:18.04:LTS canonical linux-gke-4.15 < 4.15.0-1070.73
Fix: upgrade to 4.15.0-1070.73
Ubuntu:18.04:LTS canonical linux-hwe < 5.3.0-26.28~18.04.1
Fix: upgrade to 5.3.0-26.28~18.04.1
Ubuntu:18.04:LTS canonical linux-kvm < 4.15.0-1075.76
Fix: upgrade to 4.15.0-1075.76
Ubuntu:18.04:LTS canonical linux-oem < 4.15.0-1097.107
Fix: upgrade to 4.15.0-1097.107
Ubuntu:18.04:LTS canonical linux-oracle < 4.15.0-1054.58
Fix: upgrade to 4.15.0-1054.58
Ubuntu:18.04:LTS canonical linux-raspi2 < 4.15.0-1071.75
Fix: upgrade to 4.15.0-1071.75
Ubuntu:18.04:LTS canonical linux-snapdragon < 4.15.0-1087.95
Fix: upgrade to 4.15.0-1087.95
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-edge All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips < 4.15.0-2027.27
Fix: upgrade to 4.15.0-2027.27
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips < 4.15.0-2009.10
Fix: upgrade to 4.15.0-2009.10
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips < 4.15.0-1041.46
Fix: upgrade to 4.15.0-1041.46
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Showing 50 of 67. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield All versions
Debian:12 debian linux < 5.3.9-1
Fix: upgrade to 5.3.9-1
– linux linux_kernel >= 3.9, < 4.4.262
>= 4.5, < 4.9.262
>= 4.10, < 4.14.192
>= 4.15, < 4.19.137
>= 4.20, < 5.3.9
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
– canonical ubuntu_linux 14.04
16.04
18.04
19.10
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
– netapp active_iq_unified_manager All versions
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
– netapp aff_baseboard_management_controller All versions
cpe:2.3:a:netapp:aff_baseboard_management_controller:-:*:*:*:*:*:*:*
– netapp cloud_backup All versions
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
– netapp data_availability_services All versions
cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*
– netapp e-series_santricity_os_controller 11.0
11.0.0
11.20
11.25
11.30
11.30.5r3
11.40
11.40.3r2
11.40.5
11.50.1
11.50.2
11.60
5 more version ranges
cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0:*:*:*:*:*:*:*
– netapp fas\/aff_baseboard_management_controller All versions
cpe:2.3:a:netapp:fas\/aff_baseboard_management_controller:-:*:*:*:*:*:*:*
– netapp hci_baseboard_management_controller h610s
cpe:2.3:a:netapp:hci_baseboard_management_controller:h610s:*:*:*:*:*:*:*
– netapp solidfire\,_enterprise_sds_\&_hci_storage_node All versions
cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*
– netapp solidfire_\&_hci_management_node All versions
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
– netapp steelstore_cloud_integrated_storage All versions
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*
– broadcom brocade_fabric_operating_system_firmware All versions
cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*
– netapp hci_compute_node_firmware All versions
cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*
– netapp solidfire_baseboard_management_controller_firmware All versions
cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*
Original advisory text
A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka...
A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-9c0530e898f3.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
3% chance of attack within 30 days
Type
CWE-401Memory Leak
Timeline
Published18 Nov 2019
Updated4 Nov 2026
First seen17 Aug 2026
Sources
UBUNTU-CVE-2019-19061 · OSV
CVE-2019-19061 · NVD
DEBIAN-CVE-2019-19061 · OSV
Track software like this
Free during beta