---
id: CVE-2019-20095
title: >-
  mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux
  kernel before 5.1.6 has some error-handling cases that did not free allocated
  hostcmd memory, aka CID-003b686ace82
summary: >-
  mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux
  kernel before 5.1.6 has some error-handling cases that did not free allocated
  hostcmd memory, aka CID-003b686ace82. This will cause a memory leak and denial
  o…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-401
  - CWE-772
vendor: netapp
product: active_iq_unified_manager
affected:
  - linux_kernel < 5.1.6
  - leap = 15.1
  - active_iq_unified_manager
  - cloud_backup
  - data_availability_services
  - 'e-series_santricity_os_controller >= 11.0.0, <= 11.70.1'
  - hci_management_node
  - solidfire
  - steelstore_cloud_integrated_storage
  - a700s_firmware
  - 8300_firmware
  - 8700_firmware
  - a400_firmware
  - h610s_firmware
patched:
  - linux_kernel 5.1.6
published: '2019-12-30'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T21:17:19.763'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2019-20095'
references:
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html'
    label: cve@mitre.org
  - url: 'https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.6'
    label: cve@mitre.org
  - url: >-
      https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=003b686ace820ce2d635a83f10f2d7f9c147dabc
    label: cve@mitre.org
  - url: 'https://security.netapp.com/advisory/ntap-20200204-0002/'
    label: cve@mitre.org
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.6'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=003b686ace820ce2d635a83f10f2d7f9c147dabc
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.netapp.com/advisory/ntap-20200204-0002/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-20095.json
  - url: 'https://access.redhat.com/security/cve/CVE-2019-20095'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=1791954'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2019-20095'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2019-20095'
  - url: 'https://access.redhat.com/errata/RHSA-2020:4060'
  - url: 'https://access.redhat.com/errata/RHSA-2020:4062'
  - url: 'https://access.redhat.com/errata/RHSA-2020:1493'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00394
epssPercentile: 0.33479
ingestedAt: '2026-10-08T22:11:53.709Z'
scores:
  nvd: 5.5
  vendor: 5.2
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-08T21:00:57.526168Z'
---

## Overview

mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. This will cause a memory leak and denial of service.

## Affected

- `linux_kernel < 5.1.6`
- `leap = 15.1`
- `active_iq_unified_manager`
- `cloud_backup`
- `data_availability_services`
- `e-series_santricity_os_controller >= 11.0.0, <= 11.70.1`
- `hci_management_node`
- `solidfire`
- `steelstore_cloud_integrated_storage`
- `a700s_firmware`
- `8300_firmware`
- `8700_firmware`
- `a400_firmware`
- `h610s_firmware`

## Remediation

Upgrade past the affected range:

- `linux_kernel 5.1.6`

## Vendor advisories

- **RHSA-2020:4060** · Red Hat · fixed in: Red Hat Enterprise Linux Client (v. 7), Red Hat Enterprise Linux Client Optional (v. 7), Red Hat Enterprise Linux ComputeNode (v. 7), Red Hat Enterprise Linux ComputeNode Optional (v. 7), Red Hat Enterprise Linux Server (v. 7), Red Hat Enterprise Linux Server Optional (v. 7), … · released 2020-09-29 · [advisory](https://access.redhat.com/errata/RHSA-2020:4060)
- **RHSA-2020:4062** · Red Hat · fixed in: Red Hat Enterprise Linux for Real Time for NFV (v. 7), Red Hat Enterprise Linux for Real Time (v. 7) · released 2020-09-29 · [advisory](https://access.redhat.com/errata/RHSA-2020:4062)
- **RHSA-2020:1493** · Red Hat · fixed in: Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7), Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) · released 2020-04-16 · [advisory](https://access.redhat.com/errata/RHSA-2020:1493)
- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 8, Red Hat Enterprise MRG 2 · no fix planned: Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, Red Hat Enterprise MRG 2, Red Hat Enterprise Linux 8 · updated 2026-10-08 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-20095.json)