CVE-2019-16232

· MEDIUMModified

← All CVEs

CVSS v3.1

4.1

EPSS

0.58%

Published

Sep 11, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-476

Affected Products (9)

linux · linux_kernelvulnerable

canonical · ubuntu_linuxvulnerable

fedoraproject · fedoravulnerable

· leap

References (20)

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/

https://lkml.org/lkml/2019/9/9/487

ExploitPatch

KEV Catalog EPSS Scores Vendors All CVEs