NetSight
IP …
high7.5

CVE-2019-11810

An issue was discovered in the Linux kernel before 5.0.7.

Impact

An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.16.69
from 3.17 before 3.18.139
from 3.19 before 4.4.179
from 4.5 before 4.9.168
from 4.10 before 4.14.111
from 4.15 before 4.19.34
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.04
DebianDebian Linux
Version 8.0

Weakness classification

CWE-416CWE-476

References