Wind River Support Network

HomeDefectsLINCD-727

Fixed

LINCD-727 : Security Advisory - linux - CVE-2019-19947

Created: Dec 24, 2019 Updated: Sep 13, 2022

Resolved Date: Feb 7, 2020

Found In Version: 10.20.3.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Kernel

Description

In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.

CREATE(Triage):(User=admin) CVE-2019-19947 (https://nvd.nist.gov/vuln/detail/CVE-2019-19947)

CVEs

CVE-2019-19947