NetSight
medium5.5

CVE-2019-20054

In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da958803…

Impact

In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.0.6
NetappActive Iq Unified Manager
All versions
NetappCloud Backup
All versions
NetappData Availability Services
All versions
NetappE-Series Santricity Os Controller
from 11.0 through 11.70.2
NetappFas\/Aff Baseboard Management Controller
All versions
NetappSolidfire \& Hci Management Node
All versions
NetappSteelstore Cloud Integrated Storage
All versions
NetappSolidfire Baseboard Management Controller
All versions
NetappH610s Firmware
All versions
Netapp8300 Firmware
All versions
Netapp8700 Firmware
All versions

Weakness classification

References