PT-2019-5707 · Linux+2 · Linux Kernel+2

Published 2019-03-29 · Updated 2021-05-28 · CVE-2019-20806

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2

Description The issue is related to a NULL pointer dereference in the tw5864 handle frame() function in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service. This could allow an attacker to cause a service disruption.

Recommendations For Linux kernel versions prior to 5.2, update to version 5.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the tw5864 handle frame() function in the affected driver to minimize the risk of exploitation.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2019-2321

ALT-PU-2019-2339

ALT-PU-2019-2488

ALT-PU-2019-2746

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

BDU:2021-00258

CVE-2019-20806

DLA-2242-1

DSA-4698-1

OPENSUSE-SU-2020:0801-1

OPENSUSE-SU-2020_0801-1

SUSE-SU-2020:1587-1

SUSE-SU-2020:1599-1

SUSE-SU-2020:1602-1

SUSE-SU-2020:1603-1

SUSE-SU-2020:1604-1

SUSE-SU-2020:1605-1

SUSE-SU-2020:2156-1

SUSE-SU-2020:2478-1

SUSE-SU-2020:2487-1

SUSE-SU-2020_1587-1

SUSE-SU-2020_1599-1

SUSE-SU-2020_1602-1

SUSE-SU-2020_1603-1

SUSE-SU-2020_1604-1

SUSE-SU-2020_1605-1

SUSE-SU-2021:0438-1

Affected Products

Alt Linux

Linux Kernel

Suse

References · 454

• https://github.com/torvalds/linux/commit/2e7682ebfc750177a4944eeb56e97a3f05734528 · Patch
• https://debian.org/security/2020/dsa-4698 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1605-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4698-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2156-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2478-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-20806 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-20806 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2487-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1587-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0801-1 · Vendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-20806 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1599-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00258 · Security Note