Vulnerability Database

317,828

Total vulnerabilities in the database

CVE-2019-19049

A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because unittest.c can only be reached during boot

  • Published: Nov 18, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-19049
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: High
  • Score: 7.8
  • AV:N/AC:L/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
linux / linux_kernel 4.15 4.19.83
linux / linux_kernel 4.10 4.14.153
linux / linux_kernel 4.5 4.9.200
linux / linux_kernel 3.17 4.4.200
linux / linux_kernel 4.20 5.3.10
opensuse / leap 15.1 15.1.x