CVE-2019-19071: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

A memory leak in the rsi_send_beacon() function in drivers/net/wireless/rsi/rsi_91x_mgmt.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering rsi_prepare_beacon() failures, aka CID-d563131ef23c.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 19.10 only
• Linux Linux Kernel: from 4.14, before 4.14.159 (fixed in 4.14.159); from 4.15, before 4.19.89 (fixed in 4.19.89); from 4.20, before 5.3.16 (fixed in 5.3.16); from 5.4.0, before 5.4.3 (fixed in 5.4.3)

Published 2019-11-18. Last modified 2026-06-17.