CVE-2019-19462CWE-476

CVE-2019-19462

Medium · published November 30, 2019

CVSS v3.1
5.5
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2019-11-30T06:15Z
Affected products (15)
ProductVersionsFixed in
linux/linux_kernel≤ 5.4.1—
netapp/active_iq_unified_manager≥ 9.5—
netapp/hci_management_nodeall versions—
netapp/solidfireall versions—
netapp/hci_compute_nodeall versions—
netapp/hci_storage_nodeall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
canonical/ubuntu_linuxall versions—
opensuse/leapall versions—
opensuse/leapall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
References (30)
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html · [email protected]https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html · [email protected]https://lore.kernel.org/lkml/20191129013745.7168-1-dja%40axtens.net/ · [email protected]https://security.netapp.com/advisory/ntap-20210129-0004/ · [email protected]https://syzkaller-ppc64.appspot.com/bug?id=1c09906c83a8ea811a9e318c2a4f8e243becc6f8 · [email protected]https://syzkaller-ppc64.appspot.com/bug?id=b05b4d005191cc375cdf848c3d4d980308d50531 · [email protected]https://syzkaller.appspot.com/bug?id=e4265490d26d6c01cd9bc79dc915ef0a1bf15046 · [email protected]https://syzkaller.appspot.com/bug?id=f4d1cb4330bd3ddf4a628332b4285407b2eedd7b · [email protected]https://usn.ubuntu.com/4414-1/ · [email protected]https://usn.ubuntu.com/4425-1/ · [email protected]https://usn.ubuntu.com/4439-1/ · [email protected]https://usn.ubuntu.com/4440-1/ · [email protected]https://www.debian.org/security/2020/dsa-4698 · [email protected]https://www.debian.org/security/2020/dsa-4699 · [email protected]http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html · af854a3a-2127-422b-91ae-364da2661108https://lore.kernel.org/lkml/20191129013745.7168-1-dja%40axtens.net/ · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20210129-0004/ · af854a3a-2127-422b-91ae-364da2661108https://syzkaller-ppc64.appspot.com/bug?id=1c09906c83a8ea811a9e318c2a4f8e243becc6f8 · af854a3a-2127-422b-91ae-364da2661108https://syzkaller-ppc64.appspot.com/bug?id=b05b4d005191cc375cdf848c3d4d980308d50531 · af854a3a-2127-422b-91ae-364da2661108https://syzkaller.appspot.com/bug?id=e4265490d26d6c01cd9bc79dc915ef0a1bf15046 · af854a3a-2127-422b-91ae-364da2661108https://syzkaller.appspot.com/bug?id=f4d1cb4330bd3ddf4a628332b4285407b2eedd7b · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4414-1/ · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4425-1/ · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4439-1/ · af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/4440-1/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2020/dsa-4698 · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2020/dsa-4699 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 30 NOV 00:57Z
    relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL…
    cvelistv5