In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client, aka CID-9804501fa122.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perf | Jun 17, 2020 | Nov 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade perf | Apr 16, 2020 | Nov 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-headers | Feb 24, 2020 | Nov 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-sourceUpgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headers | Jan 3, 2020 | Nov 22, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-obs-build | Dec 7, 2019 | Nov 22, 2019 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-edgeUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-173-genericUpgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-5.0Upgrade linux-image-gke-4.15Upgrade linux-image-virtual-hwe-16.04 | Jan 29, 2020 | Nov 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub