An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: The vendor disputes this issues as not being a vulnerability because kstrdup() returning NULL is handled sufficiently and there is no chance for a NULL pointer dereference
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 1, 2020 | May 28, 2019 |
| Debian | — | No solution exists | May 15, 2025 | May 28, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2019 | May 28, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headers | Sep 12, 2019 | May 28, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-devel | Mar 12, 2020 | May 28, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 9, 2020 | May 24, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 28, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Apr 1, 2020 | May 28, 2019 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-default | Jun 18, 2019 | May 28, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 28, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub