PT-2019-6292 · Linux+7 · Linux Kernel+7
Published
2019-09-10
·
Updated
2026-03-13
·
CVE-2019-16231
CVSS v2.0
4.7
Medium
| Vector | AV:L/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 5.2.14
Description
The issue is related to a NULL pointer dereference in the Linux kernel. Specifically, the
drivers/net/fjes/fjes main.c file does not check the return value of alloc workqueue, leading to this problem. The vulnerability can be exploited to cause a denial of service.Recommendations
For Linux kernel version 5.2.14, consider applying a patch that checks the return value of
alloc workqueue to prevent the NULL pointer dereference. As a temporary workaround, restrict access to the vulnerable driver to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Centos
Debian
Linux Kernel
Red Hat
Suse
Ubuntu