CVE-2019-18813: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days.

A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures, aka CID-9bbfceea12a8.

Affected products

• Canonical Ubuntu Linux: version 18.04 only; version 19.04 only; version 19.10 only
• Linux Linux Kernel: from 4.19, before 4.19.84 (fixed in 4.19.84); from 4.20, before 5.3.11 (fixed in 5.3.11)

Published 2019-11-07. Last modified 2026-06-17.