CVEvulnerability

CVE-2019-12615

7.5 HIGH Published 2019-06-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-06-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-476

Description

An issue was discovered in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup_const of node_info->vdev_port.name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).

Affected configurations

• linux linux kernel (>= 2.6.12.1 < 4.14.130) • linux linux kernel (>= 4.19 < 4.19.56) • linux linux kernel (>= 5.1 < 5.1.15) • linux linux kernel 2.6.12 • linux linux kernel 5.2 • netapp aff a700s firmware • netapp active iq unified manager (>= 9.5) • netapp hci management node • netapp solidfire • netapp cn1610 firmware • netapp h610s firmware

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References