CVE-2019-12615
Fixed in a distro release EPSS 4%
An issue was discovered in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup_const of node_info->vdev_port.name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).
Products: linux_kernel, netapp aff_a700s_firmware, netapp active_iq_unified_manager, netapp hci_management_node, netapp solidfire, netapp cn1610_firmware, netapp h610s_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 5.2.6-1 |
| Debian 13 | linux | 5.2.6-1 |
| Debian 14 | linux | 5.2.6-1 |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1059.64~14.04.1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2018.18 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2006.7 |
| Ubuntu Pro FIPS 18.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-gcp-fips | no fix |