PT-2019-3348 · Linux+4 · Linux Kernel+4

Publicado 2019-09-05 · Atualizado 2026-03-14 · CVE-2019-16089

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.14

Description The issue is related to the nbd genl status function in the Linux kernel, specifically in the drivers/block/nbd.c file. It does not check the return value of nla nest start noflag, which can lead to pointer dereference errors. An attacker could potentially exploit this issue to cause a denial of service using a specially crafted application.

Recommendations For Linux kernel versions prior to 5.2.14, update to version 5.2.14 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2019-2673

ALT-PU-2019-2745

ALT-PU-2019-2746

ALT-PU-2019-2768

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

BDU:2019-03478

CVE-2019-16089

ECHO-F07B-34E3-47BE

OESA-2021-1086

OESA-2021-1087

USN-4414-1

USN-4425-1

USN-4439-1

USN-4440-1

Produtos afetados

Alt Linux

Debian

Linuxmint

Linux Kernel

Ubuntu

Referências · 82

• https://ubuntu.com/security/notices/USN-4439-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-16089 · Nota de Segurança
• https://support.f5.com/csp/article/K03814795?utm_source=f5support&amp%3Butm_medium=RSS · Nota
• https://lore.kernel.org/patchwork/patch/1106884 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-12380 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2020-10757 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-16089 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2020-14381 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2020-28374 · Nota de Segurança
• https://osv.dev/vulnerability/OESA-2021-1087 · Aviso do Fabricante
• https://security.netapp.com/advisory/ntap-20191004-0001 · Nota
• https://ubuntu.com/security/CVE-2020-11935 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2020-27068 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2020-0466 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2021-0342 · Nota de Segurança