CVE-2019-20810 in Ubuntu

CVE-2019-20810

Priority

Description

go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux
kernel before 5.6 does not call snd_card_free for a failure path, which
causes a memory leak, aka CID-9453264ef586.

Ubuntu-Description

Chuhong Yuan discovered that go7007 USB audio device driver in the Linux
kernel did not properly deallocate memory in some failure conditions. A
physically proximate attacker could use this to cause a denial of service
(memory exhaustion).

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20810
https://git.kernel.org/linus/9453264ef58638ce8976121ac44c07a3ef375983
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9453264ef58638ce8976121ac44c07a3ef375983
https://ubuntu.com/security/notices/USN-4427-1
https://ubuntu.com/security/notices/USN-4439-1
https://ubuntu.com/security/notices/USN-4440-1
https://ubuntu.com/security/notices/USN-4483-1
https://ubuntu.com/security/notices/USN-4485-1

Notes

Package

Source: linux (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (4.15.0-115.116)
Ubuntu 20.04 LTS:	released (5.4.0-45.49)
Ubuntu 16.04 ESM:	released (4.4.0-186.216)
Ubuntu 14.04 ESM:	ignored (was needed ESM criteria)

Patches:

Introduced by

a4f2473d39eb72915d37d65bdd8dd734c7ee4f8a

Fixed by

9453264ef58638ce8976121ac44c07a3ef375983

Package

Source: linux-aws (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (4.15.0-1080.84)
Ubuntu 20.04 LTS:	released (5.4.0-1022.22)
Ubuntu 16.04 ESM:	released (4.4.0-1111.123)
Ubuntu 14.04 ESM:	released (4.4.0-1075.79)

Patches:

Package

Source: linux-aws-5.0 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	ignored (was needs-triage now end-of-life)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-aws-5.3 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.3.0-1032.34~18.04.2)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-aws-5.4 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.4.0-1022.22~18.04.1)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-aws-hwe (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	DNE
Ubuntu 20.04 LTS:	DNE
Ubuntu 16.04 ESM:	released (4.15.0-1080.84~16.04.1)
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-azure (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	ignored (was needs-triage now end-of-life)
Ubuntu 20.04 LTS:	released (5.4.0-1023.23)
Ubuntu 16.04 ESM:	released (4.15.0-1093.103~16.04.1)
Ubuntu 14.04 ESM:	released (4.15.0-1093.103~14.04.1)

Patches:

Package

Source: linux-azure-4.15 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (4.15.0-1093.103)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-azure-5.3 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.3.0-1034.35~18.04.1)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-azure-5.4 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.4.0-1023.23~18.04.1)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-azure-edge (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	ignored (was needs-triage now end-of-life)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-gcp (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	ignored (was needs-triage now end-of-life)
Ubuntu 20.04 LTS:	released (5.4.0-1022.22)
Ubuntu 16.04 ESM:	released (4.15.0-1081.92~16.04.1)
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-gcp-4.15 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (4.15.0-1081.92)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-gcp-5.3 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.3.0-1032.34~18.04.1)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-gcp-5.4 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.4.0-1022.22~18.04.1)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-gcp-edge (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	ignored (was needs-triage now end-of-life)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-gke-4.15 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (4.15.0-1067.70)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-gke-5.0 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.0.0-1045.46)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-gke-5.3 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.3.0-1032.34~18.04.1)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-hwe (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.3.0-64.58~18.04.1)
Ubuntu 20.04 LTS:	DNE
Ubuntu 16.04 ESM:	released (4.15.0-115.116~16.04.1)
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-hwe-5.4 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.4.0-45.49~18.04.2)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-hwe-edge (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	ignored (was needs-triage now end-of-life)
Ubuntu 20.04 LTS:	DNE
Ubuntu 16.04 ESM:	ignored (was needs-triage now end-of-life)
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-kvm (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (4.15.0-1072.73)
Ubuntu 20.04 LTS:	released (5.4.0-1021.21)
Ubuntu 16.04 ESM:	released (4.4.0-1077.84)
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-lts-trusty (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	DNE
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-lts-xenial (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	DNE
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	released (4.4.0-186.216~14.04.1)

Patches:

Package

Source: linux-oem (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (4.15.0-1094.104)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-oem-5.6 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	DNE
Ubuntu 20.04 LTS:	not-affected (5.6.0-1007.7)
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-oem-osp1 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.0.0-1065.70)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-oracle (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (4.15.0-1051.55)
Ubuntu 20.04 LTS:	released (5.4.0-1022.22)
Ubuntu 16.04 ESM:	released (4.15.0-1051.55~16.04.1)
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-oracle-5.0 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	ignored (was needs-triage now end-of-life)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-oracle-5.3 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.3.0-1030.32~18.04.1)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-oracle-5.4 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.4.0-1022.22~18.04.1)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-raspi (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	DNE
Ubuntu 20.04 LTS:	released (5.4.0-1016.17)
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-raspi-5.4 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.4.0-1016.17~18.04.1)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-raspi2 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (4.15.0-1068.72)
Ubuntu 20.04 LTS:	ignored (was needs-triage now end-of-life)
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-raspi2-5.3 (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (5.3.0-1030.32~18.04.2)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-riscv (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	DNE
Ubuntu 20.04 LTS:	released (5.4.0-31.35)
Ubuntu 14.04 ESM:	DNE

Patches:

Package

Source: linux-snapdragon (LP Ubuntu Debian)

Upstream:	released (5.6~rc1)
Ubuntu 18.04 LTS:	released (4.15.0-1084.92)
Ubuntu 20.04 LTS:	DNE
Ubuntu 14.04 ESM:	DNE

Patches:

More Information

Updated: 2022-04-13 13:54:02 UTC (commit f411bd370d482ef4385c4e751d121a4055fbc009)