CHK NVD : CVE-2019-19076 - c7c9dff0

[witchcraze]

[CVE Configuration Update Request] Update Suggestion - CVE-2019-19076 - Cvss2 : 7.1
[CVE Configuration Update Request] Update Suggestion - CVE-2019-19076 - Cvss3 : 5.9

https://www.linuxkernelcves.com/cves/CVE-2019-19076
https://gitlab.com/cip-project/cip-kernel/cip-kernel-sec/-/blob/master/issues/CVE-2019-19076.yml
https://github.com/witchcraze/NVD_CHECK/blob/main/kernel/CVE-2019-19076.json

- CVE-2019-19076
- Suggested Configuration
  - OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.3.0 up to (excluding) 5.3.6
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.4.0 up to (excluding) 5.4
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.4.0 up to (excluding) 5.4.22
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5.0 up to (excluding) 5.5.6
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.6.0 up to (excluding) 5.6
- Reference
  - https://www.kernel.org/pub//linux/kernel/v5.x/ChangeLog-5.3.6
  - https://www.kernel.org/pub//linux/kernel/v5.x/ChangeLog-5.4
  - https://www.kernel.org/pub//linux/kernel/v5.x/ChangeLog-5.4.22
  - https://www.kernel.org/pub//linux/kernel/v5.x/ChangeLog-5.5.6
  - https://www.kernel.org/pub//linux/kernel/v5.x/ChangeLog-5.6
- Reference (Commit)
  - nfp: abm: fix memory leak in nfp_abm_u32_knode_replace
    - Fixed by
      - 5.3.6 (eab54b91ad373fc59c37acd22cc912cff98f41c7)
      - 5.4 (78beef629fd95be4ed853b2d37b832f766bd96ca) (upstream)
    - Will be introduced by
      - 5.0 (174ab544e3bc)
  - Revert "nfp: abm: fix memory leak in nfp_abm_u32_knode_replace"
    - Fixed by
      - 5.4.22 (e07c107a24835a6eb15f7b2c2eb6c0e0c0e4583c)
      - 5.5.6 (0a27a2afbb24e073198041a09b2716e9540a7e1a)
      - 5.6 (1d1997db870f4058676439ef7014390ba9e24eb2) (upstream)
    - Will be introduced by
- I Checked
  - XXXXXXXXXXXXXXXXXXXXXXXXXXXX is written as upstream commit in each ChangeLog
  - From XXXXXXXX commit page, XXXXXXXXXXX is the most oldest in commit-branches area
  - For 3.16.35, there is related post at lkml
  - For 3.16 series, 3.16.35 is the next release from 3.16.7 which was released at 2014
  - https://mirrors.edge.kernel.org/pub/linux/kernel/v3.x/
  - XXXX

https://nvd.nist.gov/vuln/detail/CVE-2019-19076

URI	Start(Ex)	Start(Inc)	End(Ex)	End(Inc)
cpe:/o:redhat:enterprise_linux:8.0
cpe:/o:linux:linux_kernel			5.3.6
cpe:/o:canonical:ubuntu_linux:19.04
cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~