PT-2019-14473 · Linux+4 · Linux Kernel+4

Publicado

2019-05-04

·

Atualizado

2021-05-28

·

CVE-2019-15924

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0.11
Description A NULL pointer dereference issue was discovered in the Linux kernel. This occurs in the fm10k init module function within drivers/net/ethernet/intel/fm10k/fm10k main.c due to the lack of error handling for an alloc workqueue failure, specifically not checking for -ENOMEM.
Recommendations For Linux kernel versions prior to 5.0.11, update to version 5.0.11 or later to resolve the issue.

Exploit

Correção

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2019-1762
ALT-PU-2019-1767
ALT-PU-2020-1198
ALT-PU-2020-1501
ALT-PU-2020-2410
ALT-PU-2020-2433
ALT-PU-2021-1870
CESA-2019_3309
CESA-2019_3517
CVE-2019-15924
DLA-1919-1
DLA-1919-2
OPENSUSE-SU-2019:2173-1
OPENSUSE-SU-2019:2181-1
OPENSUSE-SU-2019_2173-1
OPENSUSE-SU-2019_2181-1
RHSA-2019:3309
RHSA-2019:3517
RHSA-2019_3309
RHSA-2019_3517
SUSE-SU-2019:2412-1
SUSE-SU-2019:2414-1
SUSE-SU-2019:2424-1
SUSE-SU-2019:2648-1
SUSE-SU-2019:2651-1
SUSE-SU-2019:2658-1
SUSE-SU-2019:2738-1
SUSE-SU-2019:2756-1
SUSE-SU-2019:2949-1
SUSE-SU-2019:2984-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse