{"id":"CVE-2019-19054","title":"A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CI…","summary":"A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CI…","severity":"medium","cvss":4.7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"vendor":"netapp","product":"active_iq_unified_manager","affected":["linux_kernel <= 5.3.11","ubuntu_linux = 14.04","ubuntu_linux = 16.04","ubuntu_linux = 18.04","ubuntu_linux = 20.04","fedora = 30","fedora = 31","leap = 15.1","active_iq_unified_manager","aff_baseboard_management_controller","cloud_backup","data_availability_services","e-series_santricity_os_controller = 11.0","e-series_santricity_os_controller = 11.0.0","e-series_santricity_os_controller = 11.20","e-series_santricity_os_controller = 11.25","e-series_santricity_os_controller = 11.30","e-series_santricity_os_controller = 11.30.5r3","e-series_santricity_os_controller = 11.40","e-series_santricity_os_controller = 11.40.3r2","e-series_santricity_os_controller = 11.40.5","e-series_santricity_os_controller = 11.50.1","e-series_santricity_os_controller = 11.50.2","e-series_santricity_os_controller = 11.60","e-series_santricity_os_controller = 11.60.0","e-series_santricity_os_controller = 11.60.1","e-series_santricity_os_controller = 11.60.3","e-series_santricity_os_controller = 11.70.1","e-series_santricity_os_controller = 11.70.2","fas/aff_baseboard_management_controller","hci_baseboard_management_controller = h610s","solidfire,_enterprise_sds_&_hci_storage_node","solidfire_&_hci_management_node","steelstore_cloud_integrated_storage","brocade_fabric_operating_system_firmware","hci_compute_node_firmware","solidfire_baseboard_management_controller_firmware"],"published":"2019-11-18","updated":"2026-10-08","sourceUpdated":"2026-10-08T21:17:17.700","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-19054","references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html","label":"cve@mitre.org"},{"url":"https://github.com/torvalds/linux/commit/a7b2df76b42bdd026e3106cf2ba97db41345a177","label":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/","label":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/","label":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20191205-0001/","label":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4525-1/","label":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4526-1/","label":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4527-1/","label":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/torvalds/linux/commit/a7b2df76b42bdd026e3106cf2ba97db41345a177","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20191205-0001/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4525-1/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4526-1/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4527-1/","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00446,"epssPercentile":0.36785,"ingestedAt":"2026-10-08T22:11:53.705Z","slug":"CVE-2019-19054","body":"## Overview\n\nA memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.\n\n## Affected\n\n- `linux_kernel <= 5.3.11`\n- `ubuntu_linux = 14.04`\n- `ubuntu_linux = 16.04`\n- `ubuntu_linux = 18.04`\n- `ubuntu_linux = 20.04`\n- `fedora = 30`\n- `fedora = 31`\n- `leap = 15.1`\n- `active_iq_unified_manager`\n- `aff_baseboard_management_controller`\n- `cloud_backup`\n- `data_availability_services`\n- `e-series_santricity_os_controller = 11.0`\n- `e-series_santricity_os_controller = 11.0.0`\n- `e-series_santricity_os_controller = 11.20`\n- `e-series_santricity_os_controller = 11.25`\n- `e-series_santricity_os_controller = 11.30`\n- `e-series_santricity_os_controller = 11.30.5r3`\n- `e-series_santricity_os_controller = 11.40`\n- `e-series_santricity_os_controller = 11.40.3r2`\n- `e-series_santricity_os_controller = 11.40.5`\n- `e-series_santricity_os_controller = 11.50.1`\n- `e-series_santricity_os_controller = 11.50.2`\n- `e-series_santricity_os_controller = 11.60`\n- `e-series_santricity_os_controller = 11.60.0`\n- `e-series_santricity_os_controller = 11.60.1`\n- `e-series_santricity_os_controller = 11.60.3`\n- `e-series_santricity_os_controller = 11.70.1`\n- `e-series_santricity_os_controller = 11.70.2`\n- `fas/aff_baseboard_management_controller`\n- `hci_baseboard_management_controller = h610s`\n- `solidfire,_enterprise_sds_&_hci_storage_node`\n- `solidfire_&_hci_management_node`\n- `steelstore_cloud_integrated_storage`\n- `brocade_fabric_operating_system_firmware`\n- `hci_compute_node_firmware`\n- `solidfire_baseboard_management_controller_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":25.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}