CVE-2019-12615

An issue was discovered in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup_const of node_info->vdev_port.name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).

Link	Resource
https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg2014901.html	Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc.git/commit/?id=80caf43549e7e41a695c6d1e11066286538b336f	Patch Vendor Advisory
http://www.securityfocus.com/bid/108549	Third Party Advisory VDB Entry
https://security.netapp.com/advisory/ntap-20190710-0002/	Third Party Advisory
https://support.f5.com/csp/article/K60924046	Third Party Advisory
https://support.f5.com/csp/article/K60924046?utm_source=f5support&utm_medium=RSS	Third Party Advisory

Configuration 1

cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.2:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.2:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.2:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.2:rc4:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:* cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*

---

Published : 2019-06-03 10:29

Updated : 2021-06-02 03:21

---

NVD link : CVE-2019-12615

Mitre link : CVE-2019-12615

Aff A700s Firmware

Netapp

CWE-476