PT-2019-2820 · Linux+2 · Linux Kernel+2

Jann Horn

·

Published

2019-06-14

·

Updated

2021-05-28

·

CVE-2019-12984

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.1.13
Description A NULL pointer dereference issue in the nfc genl deactivate target() function can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service. Additionally, a buffer overflow issue in the do hidp sock ioctl function can also cause denial of service.
Recommendations For Linux kernel versions prior to 5.1.13, update to version 5.1.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the nfc genl deactivate target() function and the do hidp sock ioctl function until a patch is available.

Fix

DoS

Buffer Overflow

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119CWE-476

Related Identifiers

ALT-PU-2019-2135
ALT-PU-2019-2200
ALT-PU-2019-2201
ALT-PU-2019-2314
ALT-PU-2020-1198
ALT-PU-2020-1501
ALT-PU-2020-2410
ALT-PU-2020-2433
ALT-PU-2021-1870
BDU:2019-02777
CVE-2019-12984
DSA-4495-1
USN-4093-1
USN-4094-1
USN-4117-1
USN-4118-1

Affected Products

Alt Linux
Linux Kernel
Ubuntu