Orta CVSS 4.7 PoC var

CVE-2019-19965: Linux Kernel: NULL işaretçi başvurusu

Yayın: 25 Aralık 2019 07:15 · Güncelleme: 6 Kasım 2026 09:45

Açıklama (NVD)

In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: %0,65 (yüzdelik 52)
CWE: CWE-476
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	—	5.4.6	—
debian-debian-linux	8.0	8.0	—
canonical-ubuntu-linux	14.04	14.04	—
canonical-ubuntu-linux	16.04	16.04	—
canonical-ubuntu-linux	18.04	18.04	—
canonical-ubuntu-linux	19.10	19.10	—
netapp-active-iq-unified-manager	—	—	—
netapp-cloud-backup	—	—	—
netapp-data-availability-services	—	—	—
netapp-e-series-santricity-os-controller	11.0.0	11.70.1	—
netapp-hci-management-node	—	—	—
netapp-solidfire	—	—	—
netapp-steelstore-cloud-integrated-storage	—	—	—
opensuse-leap	15.1	15.1	—
netapp-a700s-firmware	—	—	—
netapp-h610s-firmware	—	—	—
netapp-8300-firmware	—	—	—
netapp-8700-firmware	—	—	—
netapp-a400-firmware	—	—	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları