CVE Database›Document archive›CVE-2019-20095

CVE-2019-20095

kernel: memory leak in mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c

Loading…

Severity

Low

Red Hat Product Security

5.2

CVSS 3.1

Review impact separately from score.

Published · December 30, 2019

Updated · October 9, 2026

Description

A flaw was found in the Linux kernel's mwifiex driver implementation when connecting to other WiFi devices in "Test Mode." A kernel memory leak can occur if an error condition is met during the parameter negotiation. This issue can lead to a denial of service if multiple error conditions meeting the repeated connection attempts are attempted.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

As connecting to a wireless device is not automatic and initiated by a user, not connecting to rogue access points would prevent this flaw from being abused.

CVSS / CWE

CVSS 3.1 · 5.2
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime