#VU92339 NULL pointer dereference in Linux kernel
Vulnerability identifier: #VU92339
Vulnerability risk: Low
CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID:
CWE-ID:
CWE-476
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the nfc_genl_dump_devices_done() function in net/nfc/netlink.c. A local user can perform a denial of service (DoS) attack.
Mitigation
Install update from vendor's website.
Vulnerable software versions
Linux kernel:
External links
http://git.kernel.org/stable/c/ea55b3797878752aa076b118afb727dcf79cac34
http://git.kernel.org/stable/c/214af18abbe39db05beb305b2d11e87d09a6529c
http://git.kernel.org/stable/c/6644989642844de830f9b072cd65c553cb55946c
http://git.kernel.org/stable/c/2a8845b9603c545fddd17862282dc4c4ce0971e3
http://git.kernel.org/stable/c/d731ecc6f2eaec68f4ad1542283bbc7d07bd0112
http://git.kernel.org/stable/c/c602863ad28ec86794cb4ab4edea5324f555f181
http://git.kernel.org/stable/c/d89e4211b51752daf063d638af50abed2fd5f96d
http://git.kernel.org/stable/c/fd79a0cbf0b2e34bcc45b13acf962e2032a82203
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
