CVE-2019-12818

Fue encontrado un problema en el kernel de Linux anterior a versión 4.20.15. La función nfc_llcp_build_tlv en el archivo net/nfc/llcp_commands.c puede devolver NULL. Si la persona que llama no comprueba esto, se desencadenará una desreferencia de puntero NULL. Esto causará la denegación de servicio. Esto afecta a la función nfc_llcp_build_gb en el archivo net/nfc/llcp_core.c.

It was discovered that the USB video device class implementation in the Linux kernel did not properly validate control bits, resulting in an out of bounds buffer read. A local attacker could use this to possibly expose sensitive information (kernel memory). It was discovered that the Marvell Wireless LAN device driver in the Linux kernel did not properly validate the BSS descriptor. A local attacker could possibly use this to cause a denial of service (system crash) or possibly execute arbitrary code. Various other vulnerabilities have also been addressed.