NetSight
IP …
medium4.7

CVE-2019-19965

In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection durin…

Impact

In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 5.4.6
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.10
NetappActive Iq Unified Manager
All versions
NetappCloud Backup
All versions
NetappData Availability Services
All versions
NetappE-Series Santricity Os Controller
from 11.0.0 through 11.70.1
NetappHci Management Node
All versions
NetappSolidfire
All versions
NetappSteelstore Cloud Integrated Storage
All versions
OpensuseLeap
Version 15.1
NetappA700s Firmware
All versions

Weakness classification

CWE-476

References