An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: The vendor disputes this issues as not being a vulnerability because kstrdup() returning NULL is handled sufficiently and there is no chance for a NULL pointer dereference
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 1, 2020 | May 28, 2019 |
| Debian | — | No solution exists | May 15, 2025 | May 28, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headers | Nov 19, 2019 | May 28, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-headers | Sep 12, 2019 | May 28, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools | Mar 12, 2020 | May 28, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 9, 2020 | May 24, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 28, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Apr 1, 2020 | May 28, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azure-base | Jun 18, 2019 | May 28, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 28, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub