A memory leak in the mlx5fwfatalreporterdump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5crdumpcollect() failures, aka CID-c7ed6d0183d5.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-19047.json"
[
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 838.0,
"function_hash": "319005527528256606732513513057249554946"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/c7ed6d0183d5ea9bc31bcaeeba4070bd62546471",
"id": "CVE-2019-19047-6d972c38",
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/health.c",
"function": "mlx5_fw_fatal_reporter_dump"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"2650815958304847274438891086621624935",
"114823275844205195519105495825074071619",
"306286418918060898763685793306720847404",
"53880849484340786566235950518090069496"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/c7ed6d0183d5ea9bc31bcaeeba4070bd62546471",
"id": "CVE-2019-19047-b93e6962",
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/health.c"
}
}
]