CVEvulnerability

CVE-2019-19965

4.7 MEDIUM Published 2019-12-25 Modified 2026-10-08 Official page ↗
Status
Modified
Published
2019-12-25
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-476

Description

In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.

Affected configurations

• linux linux kernel (<= 5.4.6) • debian debian linux 8.0 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 19.10 • netapp active iq unified manager • netapp cloud backup • netapp data availability services • netapp e-series santricity os controller (>= 11.0.0 <= 11.70.1) • netapp hci management node • netapp solidfire • netapp steelstore cloud integrated storage • opensuse leap 15.1 • netapp a700s firmware • netapp h610s firmware • netapp 8300 firmware • netapp 8700 firmware • netapp a400 firmware

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References