CVE-2019-19078: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 6.6% chance of exploitation in the next 30 days.

A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-b8d17e7d93d2.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 19.10 only
• Linux Linux Kernel: from 4.14, before 4.14.165 (fixed in 4.14.165); from 4.15, before 4.19.96 (fixed in 4.19.96); from 4.20, before 5.4.12 (fixed in 5.4.12)

Published 2019-11-18. Last modified 2026-06-17.