CVE-2019-12984: Null Pointer Dereference
A NULL pointer dereference vulnerability in the function nfcgenldeactivatetarget() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.1.13
Event History
Frequently Asked Questions
What is the severity of CVE-2019-12984?
CVE-2019-12984 has a severity rating that indicates it can lead to denial of service due to a NULL pointer dereference.
How do I fix CVE-2019-12984?
To fix CVE-2019-12984, upgrade to Linux kernel version 5.1.13 or later, or apply a security patch provided by your distribution.
Which versions of the Linux kernel are affected by CVE-2019-12984?
CVE-2019-12984 affects Linux kernel versions before 5.1.13.
Can CVE-2019-12984 be exploited by local users?
Yes, CVE-2019-12984 can be exploited by a malicious user-mode program to trigger a denial of service.
What systems are at risk due to CVE-2019-12984?
Systems running Linux kernel versions before 5.1.13 are at risk of being affected by CVE-2019-12984.