A memory leak in the dwc3pciprobe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platformdeviceadd_properties() failures, aka CID-9bbfceea12a8.
[
{
"id": "CVE-2019-18813-37e3c02c",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"271270064177609845132289294362832945516",
"324236029254524881753772006771083980865",
"13398947547585833280196438920219248725",
"167729057837029520741260131317694857926"
]
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@9bbfceea12a8f145097a27d7c7267af25893c060",
"signature_type": "Line",
"target": {
"file": "drivers/usb/dwc3/dwc3-pci.c"
}
},
{
"id": "CVE-2019-18813-688efe0b",
"signature_version": "v1",
"digest": {
"function_hash": "12302192335136723801096237673705958438",
"length": 1537.0
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@9bbfceea12a8f145097a27d7c7267af25893c060",
"signature_type": "Function",
"target": {
"file": "drivers/usb/dwc3/dwc3-pci.c",
"function": "dwc3_pci_probe"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-18813.json"