CVE-2019-20096: In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which ma...

Security readout for executives and security teams

CVE-2019-20096 is a Linux kernel memory leak that can consume system resources and cause denial of service. The affected code is in the DCCP networking feature. The record says Linux kernels before 5.1 are affected, with distribution advisories from Ubuntu, Debian, and openSUSE indicating patched kernel updates were issued. Exposure is most likely on Linux systems running kernels before 5.1 or vendor kernels that did not backport the upstream fix. Internet-facing status is not enough by itself; assess whether the affected DCCP kernel code exists and is reachable in deployed systems. Treat this as a routine but availability-relevant kernel patching item. It is not flagged as actively exploited in the provided sources, but unpatched kernel denial-of-service flaws can still create operational outages on critical Linux infrastructure. Mitigation focus: Apply vendor kernel security updates from Ubuntu, Debian, openSUSE, or your Linux vendor.; Confirm the running kernel includes upstream commit 1d3ff0950e2b or a vendor backport.; Prioritize systems where kernel denial of service would affect critical services..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.