CVE-2019-16229

MEDIUM
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

** DISPUTED ** drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: The security community disputes this issues as not being serious enough to be deserving a CVE id.

References

https://bugzilla.suse.com/show_bug.cgi?id=1150469#c3

https://lkml.org/lkml/2019/9/9/487

https://security.netapp.com/advisory/ntap-20191004-0001/

https://usn.ubuntu.com/4284-1/

https://usn.ubuntu.com/4285-1/

https://usn.ubuntu.com/4287-1/

https://usn.ubuntu.com/4287-2/

Details

Source: MITRE

Published: 2019-09-11

Updated: 2020-05-04

Type: CWE-476

Risk Information

CVSS v2

Base Score: 4.7

Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 3.4

Severity: MEDIUM

CVSS v3

Base Score: 4.1

Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 0.5

Severity: MEDIUM

Tenable Plugins

View all (5 total)

IDNameProductFamilySeverity
136239EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2020-1536)NessusHuawei Local Security Checks
critical
133800Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4287-1)NessusUbuntu Local Security Checks
high
133798Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4285-1)NessusUbuntu Local Security Checks
high
133797Ubuntu 18.04 LTS / 19.10 : Linux kernel vulnerabilities (USN-4284-1)NessusUbuntu Local Security Checks
high
132605EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1012)NessusHuawei Local Security Checks
critical