7.1

CVE-2019-19080: linux linux_kernel

CVSS: 7.1v2.0HighModified
AliasesUBUNTU-CVE-2019-19080DEBIAN-CVE-2019-19080
Published 18-11-2019Last modified 08-10-2026
Open JSON

Vulnerability summary

CVE-2019-19080 is a high (CVSS 7.1) vulnerability in linux linux_kernel. EPSS estimates a 2.81% chance of exploitation in the next 30 days, higher than 86.3% of scored vulnerabilities.

Overall risk
29/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v2.0 (NVD)
EPSS score
2.81%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 6
OPENSUSE-SU-2019:2675-1SUSE-SU-2019:3200-1SUSE-SU-2019:3317-1SUSE-SU-2019:3372-1SUSE-SU-2020:0093-1SUSE-SU-2020:0613-1

Timeline

  1. 18-11-2019
    PublishedVulnerability first disclosed.
  2. 08-10-2026
    Last modifiedVulnerability information updated.

Description

Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to cause a denial of service (memory consumption), aka CID-8572cea1461a.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

2.81%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

0.00 pp

From 2.81% on 18-09-2026

18-09-202618-10-2026
EPSS score
2.81%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu17 products
  • linux-azure< 5.0.0-1025.27~18.04.1
  • linux-azure-edgeAll versions (No fix recorded)
  • linux-azure-fdeAll versions (No fix recorded)
  • linux-gcp< 5.0.0-1025.26~18.04.1
  • linux-gcp-edgeAll versions (No fix recorded)
Debian1 product
  • linux< 5.3.7-1
Linux1 product
Opensuse1 product

4 vendors · 20 products

References

7 links