#VU30810 NULL pointer dereference in Linux kernel - CVE-2019-15217


| Updated: 2020-07-17

Vulnerability identifier: #VU30810

Vulnerability risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2019-15217

CWE-ID: CWE-476

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dreference error in drivers/media/usb/zr364xx/zr364xx.c driver. A remote attacker can perform a denial of service (DoS) attack.

Mitigation
Update to version 5.2.3.

Vulnerable software versions

Linux kernel: 5.2.1 - 5.2.2

External links
https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html
https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html
https://www.openwall.com/lists/oss-security/2019/08/20/2
https://www.openwall.com/lists/oss-security/2019/08/22/2
https://www.openwall.com/lists/oss-security/2019/08/22/3
https://www.openwall.com/lists/oss-security/2019/08/22/4
https://www.openwall.com/lists/oss-security/2019/08/22/5
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d2e73a5f80a5b5aff3caf1ec6d39b5b3f54b26e
https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
https://security.netapp.com/advisory/ntap-20190905-0002/
https://syzkaller.appspot.com/bug?id=9c0c178c24d828a7378f483309001329750aad64
https://usn.ubuntu.com/4147-1/
https://usn.ubuntu.com/4286-1/
https://usn.ubuntu.com/4286-2/
https://usn.ubuntu.com/4302-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Red Hat Enterprise Linux 7 update for kernel-rt
Red Hat Enterprise Linux 7 update for kernel
Slackware Linux update for kernel
RSA Authentication Manager update for third-party components
Multiple vulnerabilities in Linux kernel