CVE-2019-16229NULL Pointer Dereference in Ubuntu Linux

Severity
4.1MEDIUMNVD
OSV5.5
EPSS
0.0%
top 87.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 11
Latest updateMay 24

Description

drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: The security community disputes this issues as not being serious enough to be deserving a CVE id

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 0.5 | Impact: 3.6

Affected Packages3 packages

Ubuntulinux/linux_kernel< 4.15.0-88.88
NVDlinux/linux_kernel5.2.14
debiandebian/linux

Also affects: Ubuntu Linux 14.04, 16.04, 18.04, 19.10, Enterprise Linux 7.0, 8.0

Patches

🔴Vulnerability Details

6
GHSA
GHSA-fq48-7x6v-77vv: drivers/gpu/drm/amd/amdkfd/kfd_interrupt2022-05-24
OSV
linux, linux-aws, linux-azure, linux-azure-5.3, linux-gcp, linux-gcp-5.3, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-raspi2-5.3 vulnerabilities2020-02-19
OSV
linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities2020-02-18
OSV
linux-azure vulnerabilities2020-02-18
OSV
linux-aws-5.0, linux-azure, linux-gcp, linux-gke-5.0, linux-oracle-5.0 vulnerabilities2020-02-18

📋Vendor Advisories

6
Ubuntu
Linux kernel vulnerabilities2020-02-19
Ubuntu
Linux kernel vulnerabilities2020-02-18
Ubuntu
Linux kernel (Azure) vulnerabilities2020-02-18
Ubuntu
Linux kernel vulnerabilities2020-02-18
Red Hat
kernel: null pointer dereference in drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c2019-09-09

💬Community

2
Bugzilla
CVE-2019-16229 kernel: null pointer dereference in drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c [fedora-all]2019-10-10
Bugzilla
CVE-2019-16229 kernel: null pointer dereference in drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c2019-10-10