CVE-2019-15807

kernel: Memory leak in drivers/scsi/libsas/sas_expander.c

Published Aug 29, 2019 CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Description
In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1919-1 linux-4.9 security update
Debian DLA Debian DLA DLA-1919-2 linux-4.9 security update
Debian DLA Debian DLA DLA-1930-1 linux security update
EUVD EUVD EUVD-2019-6726 In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Oct 8, 2026, 9:03 PM
Reserved
Aug 29, 2019, 12:00 AM
Status
Modified
Published
Aug 29, 2019, 6:15 PM
Modified
Oct 8, 2026, 9:17 PM
Severity
Low
Public date
Aug 29, 2019, 12:00 AM