CVE-2019-19227: Null Pointer Dereference
In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because registersnapclient may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregistersnapclient, aka CID-9804501fa122.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.1
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19227?
CVE-2019-19227 has a medium severity level due to its potential to cause denial of service.
How do I fix CVE-2019-19227?
To fix CVE-2019-19227, you should upgrade to the Linux kernel version 5.1 or later.
Which versions of the Linux kernel are affected by CVE-2019-19227?
CVE-2019-19227 affects the Linux kernel versions prior to 5.1.
What components are impacted by CVE-2019-19227?
CVE-2019-19227 impacts the AppleTalk subsystem, specifically in the files net/appletalk/aarp.c and net/appletalk/ddp.c.
What kind of attack does CVE-2019-19227 enable?
CVE-2019-19227 enables denial of service attacks due to a potential NULL pointer dereference.