CVE-2019-15924

kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c

Severity Score

5.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure.

Se detectó un problema en el kernel de Linux versiones anteriores a 5.0.11. La función fm10k_init_module en el archivo drivers/net/ethernet/intel/fm10k/fm10k_main.c presenta una desreferencia del puntero NULL porque no existe -ENOMEM tras un fallo de alloc_workqueue.

A flaw was found in the way the fm10k driver in the Linux kernel reacted to memory-related errors during driver initialization. This flaw allows a local attacker to cause a denial of service and crash the system.

An update that solves 38 vulnerabilities and has 159 fixes is now available. The openSUSE Leap 15.0 kernel was updated to receive various security and bug fixes.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-09-04 CVE Reserved
2019-09-04 CVE Published
2024-08-05 CVE Updated
2024-08-05 First Exploit
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-476: NULL Pointer Dereference

CAPEC

References (9)

URL	Tag	Source
https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html	Mailing List
https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html	Mailing List
https://security.netapp.com/advisory/ntap-20191004-0001	X_refsource_confirm

URL	Date	SRC
https://github.com/torvalds/linux/commit/01ca667133d019edc9f0a1f70a272447c84ec41f	2024-08-05

URL	Date	SRC

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html	2019-09-14
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html	2019-09-14
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11	2019-09-14
https://access.redhat.com/security/cve/CVE-2019-15924	2019-11-05
https://bugzilla.redhat.com/show_bug.cgi?id=1763869	2019-11-05

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.0.11 Search vendor "Linux" for product "Linux Kernel" and version " < 5.0.11"		-		Affected