NetSight
IP …
medium4.1

CVE-2019-12614

An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6.

Impact

An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop->name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 5.1.6
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.04
FedoraprojectFedora
Versions 29, 30
OpensuseLeap
Versions 15.0, 15.1
RedhatEnterprise Linux
Versions 7.0, 8.0

Weakness classification

CWE-476

References