CVE-2019-19070: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering devm_add_action_or_reset() failures, aka CID-d3b0ffa1d75d. NOTE: third parties dispute the relevance of this because the system must have already been out of memory before the probe began

Affected products

• Fedoraproject Fedora: version 30 only; version 31 only
• Linux Linux Kernel: from 4.17, before 5.4.7 (fixed in 5.4.7); version 5.5 only

Published 2019-11-18. Last modified 2026-06-17.