PT-2019-2820 · Linux+2 · Linux Kernel+2

Jann Horn

·

Publicado

2019-06-14

·

Atualizado

2021-05-28

·

CVE-2019-12984

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.1.13
Description A NULL pointer dereference issue in the nfc genl deactivate target() function can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service. Additionally, a buffer overflow issue in the do hidp sock ioctl function can also cause denial of service.
Recommendations For Linux kernel versions prior to 5.1.13, update to version 5.1.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the nfc genl deactivate target() function and the do hidp sock ioctl function until a patch is available.

Correção

DoS

Buffer Overflow

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-476

Identificadores relacionados

ALT-PU-2019-2135
ALT-PU-2019-2200
ALT-PU-2019-2201
ALT-PU-2019-2314
ALT-PU-2020-1198
ALT-PU-2020-1501
ALT-PU-2020-2410
ALT-PU-2020-2433
ALT-PU-2021-1870
BDU:2019-02777
CVE-2019-12984
DSA-4495-1
USN-4093-1
USN-4094-1
USN-4117-1
USN-4118-1

Produtos afetados

Alt Linux
Linux Kernel
Ubuntu