An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: The vendor disputes this issues as not being a vulnerability because kstrdup() returning NULL is handled sufficiently and there is no chance for a NULL pointer dereference
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 1, 2020 | May 28, 2019 |
| Debian | — | No solution exists | May 15, 2025 | May 28, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf | Nov 19, 2019 | May 28, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-devel | Sep 12, 2019 | May 28, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade perf | Mar 12, 2020 | May 28, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 9, 2020 | May 24, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 28, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Apr 1, 2020 | May 28, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-docs | Jun 18, 2019 | May 28, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 28, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub