CVE-2019-19057: Broadcom Brocade Fabric Operating System Firmware

Low severity, CVSS 3.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.

Affected products

• Broadcom Brocade Fabric Operating System Firmware: affected versions not specified
• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 19.10 only
• Debian Debian Linux: version 8.0 only
• Fedoraproject Fedora: version 30 only; version 31 only
• Linux Linux Kernel: up to and including 5.3.11
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Aff Baseboard Management Controller: affected versions not specified
• Netapp Cloud Backup: affected versions not specified
• Netapp Data Availability Services: affected versions not specified
• Netapp E-Series Santricity OS Controller: version 11.0 only; version 11.0.0 only; version 11.20 only; version 11.25 only; version 11.30 only; version 11.30.5r3 only; …
• Netapp Fas/aff Baseboard Management Controller: affected versions not specified
• Netapp Hci Baseboard Management Controller: version h610s only
• Netapp Hci Compute Node Firmware: affected versions not specified
• Netapp Solidfire, Enterprise Sds & Hci Storage Node: affected versions not specified
• Netapp Solidfire & Hci Management Node: affected versions not specified
• Netapp Solidfire Baseboard Management Controller Firmware: affected versions not specified
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified
• Opensuse Leap: version 15.1 only

Published 2019-11-18. Last modified 2026-06-17.