CVE-2019-19462

moderate-risk
Published 2019-11-30

relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.

Do I need to act?

-
0.10% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (15)

Affected Vendors

Debian Linux Canonical Netapp Opensuse

References (30)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html
Mailing List https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
https://lore.kernel.org/lkml/20191129013745.7168-1-dja%40axtens.net/
Third Party Advisory https://security.netapp.com/advisory/ntap-20210129-0004/
Patch https://syzkaller-ppc64.appspot.com/bug?id=1c09906c83a8ea811a9e318c2a4f8e243becc...
Patch https://syzkaller-ppc64.appspot.com/bug?id=b05b4d005191cc375cdf848c3d4d980308d50...
Third Party Advisory https://syzkaller.appspot.com/bug?id=e4265490d26d6c01cd9bc79dc915ef0a1bf15046
Third Party Advisory https://syzkaller.appspot.com/bug?id=f4d1cb4330bd3ddf4a628332b4285407b2eedd7b
Third Party Advisory https://usn.ubuntu.com/4414-1/
Third Party Advisory https://usn.ubuntu.com/4425-1/
Third Party Advisory https://usn.ubuntu.com/4439-1/
Third Party Advisory https://usn.ubuntu.com/4440-1/
Third Party Advisory https://www.debian.org/security/2020/dsa-4698
Third Party Advisory https://www.debian.org/security/2020/dsa-4699
Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html
Mailing List https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
https://lore.kernel.org/lkml/20191129013745.7168-1-dja%40axtens.net/
Third Party Advisory https://security.netapp.com/advisory/ntap-20210129-0004/
and 10 more references
36
/ 100
moderate-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 18/34 · Moderate