CVE-2019-20806: An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in…

PriorityP413medium4.4CVSS 3.1

AVLACLPRHUINSUCNINAH

EPSS

0.38%

31.5th percentile

An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka CID-2e7682ebfc75.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.2.6-1 (bookworm)	linux 5.2.6-1 (bookworm)
linux	linux_kernel	< 5.2	5.2
linux	linux_kernel	>= 0 < 5.2.6-1	5.2.6-1
linux	linux_kernel	>= 0 < 5.2.6-1	5.2.6-1
linux	linux_kernel	>= 0 < 5.2.6-1	5.2.6-1
linux	linux_kernel	>= 0 < 5.2.6-1	5.2.6-1

CVSS provenance

nvdv3.14.4MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P

osv4.4MEDIUM

vendor_debian4.4MEDIUM

vendor_redhat4.4MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.