CVE-2019-16232

low-risk

Published 2019-09-11

drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

Do I need to act?

0.06% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.1/10 Medium

LOCAL / HIGH complexity

Affected Products (9)

Linux Kernel

Ubuntu Linux

Fedora

Leap

Affected Vendors

Linux Canonical Fedoraproject Opensuse

References (20)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Exploit https://lkml.org/lkml/2019/9/9/487

Third Party Advisory https://security.netapp.com/advisory/ntap-20191004-0001/

Third Party Advisory https://usn.ubuntu.com/4284-1/

Third Party Advisory https://usn.ubuntu.com/4285-1/

Third Party Advisory https://usn.ubuntu.com/4287-1/

Third Party Advisory https://usn.ubuntu.com/4287-2/