PT-2019-12892 · Linux+1 · Linux Kernel+1

Gen Zhang · Published 2018-04-06 · Updated 2021-06-02 · CVE-2019-12615

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.1.6

Description An issue was discovered in the get vdev port node info function in arch/sparc/kernel/mdesc.c. There is an unchecked kstrdup const of node info->vdev port.name, which might allow an attacker to cause a denial of service, resulting in a NULL pointer dereference and system crash.

Recommendations For Linux kernel versions through 5.1.6, update to a version later than 5.1.6 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific issue.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2018-1557

ALT-PU-2019-1139

ALT-PU-2019-1363

ALT-PU-2019-2141

ALT-PU-2019-2143

ALT-PU-2019-2157

ALT-PU-2019-2200

ALT-PU-2019-2201

ALT-PU-2019-2314

CVE-2019-12615

Affected Products

Alt Linux

Linux Kernel

References · 15

• https://osv.dev/vulnerability/UBUNTU-CVE-2019-12615 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-12615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12615 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-12615 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12615 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-12615 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc.git/commit/?id=80caf43549e7e41a695c6d1e11066286538b336f · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-12615 · Vendor Advisory
• https://t.me/cvenotify/15401 · Telegram Post
• https://support.f5.com/csp/article/K60924046?utm_source=f5support&amp%3Butm_medium=RSS · Note
• https://support.f5.com/csp/article/K60924046 · Note
• https://mail-archive.com/linux-kernel%40vger.kernel.org/msg2014901.html · Note
• https://git.kernel.org/linus/80caf43549e7e41a695c6d1e11066286538b336f · Note
• http://securityfocus.com/bid/108549 · Note
• https://security.netapp.com/advisory/ntap-20190710-0002 · Note