CVE-2019-19050: Broadcom Fabric Operating System

High severity, CVSS 7.5. EPSS: 5.1% chance of exploitation in the next 30 days.

A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.

Affected products

• Broadcom Fabric Operating System: affected versions not specified
• Canonical Ubuntu Linux: version 18.04 only; version 19.10 only
• Fedoraproject Fedora: version 30 only; version 31 only
• Linux Linux Kernel: from 4.20, before 5.3.16 (fixed in 5.3.16); from 5.4, before 5.4.3 (fixed in 5.4.3); version 5.5 only
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Aff a400 Firmware: affected versions not specified
• Netapp Aff a700s Firmware: affected versions not specified
• Netapp Data Availability Services: affected versions not specified
• Netapp E-Series Santricity OS Controller: from 11.0.0, up to and including 11.60.3
• Netapp FAS8300 Firmware: affected versions not specified
• Netapp FAS8700 Firmware: affected versions not specified
• Netapp h610s Firmware: affected versions not specified
• Netapp Hci Compute Node: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Hci Storage Node: affected versions not specified
• Netapp Solidfire: affected versions not specified
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified

Published 2019-11-18. Last modified 2026-06-17.