--- id: CVE-2019-19054 title: >- A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CI… summary: >- A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CI… severity: medium cvss: 4.7 cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H' cwe: - CWE-401 vendor: netapp product: active_iq_unified_manager affected: - linux_kernel <= 5.3.11 - ubuntu_linux = 14.04 - ubuntu_linux = 16.04 - ubuntu_linux = 18.04 - ubuntu_linux = 20.04 - fedora = 30 - fedora = 31 - leap = 15.1 - active_iq_unified_manager - aff_baseboard_management_controller - cloud_backup - data_availability_services - e-series_santricity_os_controller = 11.0 - e-series_santricity_os_controller = 11.0.0 - e-series_santricity_os_controller = 11.20 - e-series_santricity_os_controller = 11.25 - e-series_santricity_os_controller = 11.30 - e-series_santricity_os_controller = 11.30.5r3 - e-series_santricity_os_controller = 11.40 - e-series_santricity_os_controller = 11.40.3r2 - e-series_santricity_os_controller = 11.40.5 - e-series_santricity_os_controller = 11.50.1 - e-series_santricity_os_controller = 11.50.2 - e-series_santricity_os_controller = 11.60 - e-series_santricity_os_controller = 11.60.0 - e-series_santricity_os_controller = 11.60.1 - e-series_santricity_os_controller = 11.60.3 - e-series_santricity_os_controller = 11.70.1 - e-series_santricity_os_controller = 11.70.2 - fas/aff_baseboard_management_controller - hci_baseboard_management_controller = h610s - 'solidfire,_enterprise_sds_&_hci_storage_node' - solidfire_&_hci_management_node - steelstore_cloud_integrated_storage - brocade_fabric_operating_system_firmware - hci_compute_node_firmware - solidfire_baseboard_management_controller_firmware published: '2019-11-18' updated: '2026-10-08' sourceUpdated: '2026-10-08T21:17:17.700' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2019-19054' references: - url: 'http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html' label: cve@mitre.org - url: >- https://github.com/torvalds/linux/commit/a7b2df76b42bdd026e3106cf2ba97db41345a177 label: cve@mitre.org - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/ label: cve@mitre.org - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/ label: cve@mitre.org - url: 'https://security.netapp.com/advisory/ntap-20191205-0001/' label: cve@mitre.org - url: 'https://usn.ubuntu.com/4525-1/' label: cve@mitre.org - url: 'https://usn.ubuntu.com/4526-1/' label: cve@mitre.org - url: 'https://usn.ubuntu.com/4527-1/' label: cve@mitre.org - url: 'http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://github.com/torvalds/linux/commit/a7b2df76b42bdd026e3106cf2ba97db41345a177 label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/ label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/ label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.netapp.com/advisory/ntap-20191205-0001/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://usn.ubuntu.com/4525-1/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://usn.ubuntu.com/4526-1/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://usn.ubuntu.com/4527-1/' label: af854a3a-2127-422b-91ae-364da2661108 tags: - nvd epss: 0.00446 epssPercentile: 0.36785 ingestedAt: '2026-10-08T22:11:53.705Z' --- ## Overview A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b. ## Affected - `linux_kernel <= 5.3.11` - `ubuntu_linux = 14.04` - `ubuntu_linux = 16.04` - `ubuntu_linux = 18.04` - `ubuntu_linux = 20.04` - `fedora = 30` - `fedora = 31` - `leap = 15.1` - `active_iq_unified_manager` - `aff_baseboard_management_controller` - `cloud_backup` - `data_availability_services` - `e-series_santricity_os_controller = 11.0` - `e-series_santricity_os_controller = 11.0.0` - `e-series_santricity_os_controller = 11.20` - `e-series_santricity_os_controller = 11.25` - `e-series_santricity_os_controller = 11.30` - `e-series_santricity_os_controller = 11.30.5r3` - `e-series_santricity_os_controller = 11.40` - `e-series_santricity_os_controller = 11.40.3r2` - `e-series_santricity_os_controller = 11.40.5` - `e-series_santricity_os_controller = 11.50.1` - `e-series_santricity_os_controller = 11.50.2` - `e-series_santricity_os_controller = 11.60` - `e-series_santricity_os_controller = 11.60.0` - `e-series_santricity_os_controller = 11.60.1` - `e-series_santricity_os_controller = 11.60.3` - `e-series_santricity_os_controller = 11.70.1` - `e-series_santricity_os_controller = 11.70.2` - `fas/aff_baseboard_management_controller` - `hci_baseboard_management_controller = h610s` - `solidfire,_enterprise_sds_&_hci_storage_node` - `solidfire_&_hci_management_node` - `steelstore_cloud_integrated_storage` - `brocade_fabric_operating_system_firmware` - `hci_compute_node_firmware` - `solidfire_baseboard_management_controller_firmware` ## Remediation Refer to the linked advisories for vendor-supplied fixes and affected version ranges.