imPC@ndo IT

Tracker / CVE-2019-12614

CVE-2019-12614

Medium 4.1

An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop->name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).

Affected products and versions

canonical ubuntu_linux
fedoraproject fedora
linux linux_kernel · … → 5.1.6
opensuse leap
redhat enterprise_linux

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References