Wind River Support Network

HomeDefectsLIN9-8983

Fixed

LIN9-8983 : Security Advisory - linux - CVE-2019-15807

Created: Aug 29, 2019 Updated: Apr 22, 2022

Resolved Date: Oct 8, 2019

Found In Version: 9.0.0.1

Fix Version: 9.0.0.24

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Kernel

Description

In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.

CREATE(Triage):(User=admin) CVE-2019-15807 (https://nvd.nist.gov/vuln/detail/CVE-2019-15807)

CVEs

CVE-2019-15807