// For flags

CVE-2019-11810

kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.

Fue descubierto un fallo en el kernel de Linux anterior a 5.0.7. Una desreferencia de puntero NULL puede ocurrir cuando falla megasas_create_frame_pool() en megasas_alloc_cmds() en drivers/scsi/megaraid/megaraid_sas_base.c. Esto puede causar una denegación de servicio (DoS), relacionada a un uso después de liberación de memoria.

A flaw was found in the Linux kernel, prior to version 5.0.7, in drivers/scsi/megaraid/megaraid_sas_base.c, where a NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds(). An attacker can crash the system if they were able to load the megaraid_sas kernel module and groom memory beforehand, leading to a denial of service (DoS), related to a use-after-free.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2019-05-07 CVE Reserved
  • 2019-05-07 CVE Published
  • 2024-08-04 CVE Updated
  • 2024-11-06 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-416: Use After Free
  • CWE-476: NULL Pointer Dereference
CAPEC
References (24)
URL Tag Source
http://www.securityfocus.com/bid/108286 Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/06/msg00010.html Mailing List
https://security.netapp.com/advisory/ntap-20190719-0003 Third Party Advisory
https://support.f5.com/csp/article/K50484570 Third Party Advisory
URL Date SRC
URL Date SRC
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bcf3b67d16a4c8ffae0aa79de5853435e683945c 2022-12-02
https://github.com/torvalds/linux/commit/bcf3b67d16a4c8ffae0aa79de5853435e683945c 2022-12-02
URL Date SRC
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html 2022-12-02
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html 2022-12-02
https://access.redhat.com/errata/RHSA-2019:1959 2022-12-02
https://access.redhat.com/errata/RHSA-2019:1971 2022-12-02
https://access.redhat.com/errata/RHSA-2019:2029 2022-12-02
https://access.redhat.com/errata/RHSA-2019:2043 2022-12-02
https://access.redhat.com/errata/RHSA-2019:2736 2022-12-02
https://access.redhat.com/errata/RHSA-2019:2837 2022-12-02
https://access.redhat.com/errata/RHSA-2019:3217 2022-12-02
https://access.redhat.com/errata/RHSA-2020:0036 2022-12-02
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.7 2022-12-02
https://usn.ubuntu.com/4005-1 2022-12-02
https://usn.ubuntu.com/4008-1 2022-12-02
https://usn.ubuntu.com/4008-3 2022-12-02
https://usn.ubuntu.com/4115-1 2022-12-02
https://usn.ubuntu.com/4118-1 2022-12-02
https://access.redhat.com/security/cve/CVE-2019-11810 2020-01-07
https://bugzilla.redhat.com/show_bug.cgi?id=1709164 2020-01-07
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 < 3.16.69
Search vendor "Linux" for product "Linux Kernel" and version " < 3.16.69"
-
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 3.17 < 3.18.139
Search vendor "Linux" for product "Linux Kernel" and version " >= 3.17 < 3.18.139"
-
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 3.19 < 4.4.179
Search vendor "Linux" for product "Linux Kernel" and version " >= 3.19 < 4.4.179"
-
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 4.5 < 4.9.168
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.5 < 4.9.168"
-
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 4.10 < 4.14.111
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.10 < 4.14.111"
-
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 4.15 < 4.19.34
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.15 < 4.19.34"
-
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 4.20 < 5.0.7
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.20 < 5.0.7"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 14.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04"
esm
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 16.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "16.04"
esm
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 18.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "18.04"
lts
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 19.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "19.04"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 8.0
Search vendor "Debian" for product "Debian Linux" and version "8.0"
-
Affected