A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 23, 2019 | Jun 26, 2019 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-5.0.0-25-lowlatencyUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1018-snapdragonUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1013-kvmUpgrade linux-image-5.0.0-25-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-gkeUpgrade linux-image-5.0.0-25-genericUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1014-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-58-genericUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1014-raspi2Upgrade linux-image-4.15.0-1055-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-oemUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-1013-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1014-awsUpgrade linux-image-generic | Aug 14, 2019 | Jun 26, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub