CVE-2019-19227

En el subsistema AppleTalk en el kernel de Linux versiones anteriores a 5.1, se presenta una posible desreferencia del puntero NULL porque la función register_snap_client puede devolver NULL. Esto conllevará a una denegación de servicio en los archivos net/appletalk/aarp.c y net/appletalk/ddp.c, como es demostrado por la función unregister_snap_client, también se conoce como CID-9804501fa122.

It was discovered that the Atheros 802.11ac wireless USB device driver in the Linux kernel did not properly validate device metadata. A physically proximate attacker could use this to cause a denial of service. It was discovered that a race condition existed in the Virtual Video Test Driver in the Linux kernel. An attacker with write access to /dev/video0 on a system with the vivid module loaded could possibly use this to gain administrative privileges. Various other issues were also addressed.