7.8

CVE-2019-11810

An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 3.16.69
Linux ≫ Linux Kernel Version >= 3.17 < 3.18.139
Linux ≫ Linux Kernel Version >= 3.19 < 4.4.179
Linux ≫ Linux Kernel Version >= 4.5 < 4.9.168
Linux ≫ Linux Kernel Version >= 4.10 < 4.14.111
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.34
Linux ≫ Linux Kernel Version >= 4.20 < 5.0.7
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 19.04
Debian ≫ Debian Linux Version 8.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.79% 0.921
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://access.redhat.com/errata/RHSA-2020:0036
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2029
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2043
Third Party Advisory
https://usn.ubuntu.com/4118-1/
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3217
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2736
Third Party Advisory
https://usn.ubuntu.com/4115-1/
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2837
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/06/msg00010.html
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1959
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1971
Third Party Advisory
https://usn.ubuntu.com/4008-1/
Third Party Advisory
https://usn.ubuntu.com/4008-3/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190719-0003/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/108286
Third Party Advisory
VDB Entry
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.7
Vendor Advisory
Release Notes
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bcf3b67d16a4c8ffae0aa79de5853435e683945c
Patch
Vendor Advisory
https://github.com/torvalds/linux/commit/bcf3b67d16a4c8ffae0aa79de5853435e683945c
Patch
Third Party Advisory
https://support.f5.com/csp/article/K50484570
Third Party Advisory
https://usn.ubuntu.com/4005-1/
Third Party Advisory