CVE-2019-18786

MEDIUM

Linux kernel <5.3.8 - Info Disclosure

Title source: llm
STIX 2.1

Description

In the Linux kernel through 5.3.8, f->fmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem.

References (5)

Core 5
Core References
Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://patchwork.linuxtv.org/patch/59542/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4285-1/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4287-1/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4287-2/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4284-1/

Scores

CVSS v3 5.5
EPSS 0.0011
EPSS Percentile 28.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-908
Status published
Products (5)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 18.04
canonical/ubuntu_linux 19.10
linux/linux_kernel < 5.3.8
Published Nov 06, 2019
Tracked Since Feb 18, 2026