← Back

CVE-2019-20054

nvd nist
Published: Dec 28, 2019Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.

Affected (13)

Linux
1 product
Linux Kernel
Netapp
12 products
Active Iq Unified Manager
Cloud Backup
Data Availability Services
E Series Santricity Os Controller
Fas/aff Baseboard Management Controller
Solidfire & Hci Management Node
Solidfire Baseboard Management Controller
Steelstore Cloud Integrated Storage
H610s Firmware
8300 Firmware
8700 Firmware
A400 Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Linux Kernel
Before 5.0.6
Configuration B
8 vulnerable
Vulnerable SoftwareAffected Versions
Active Iq Unified Manager
All versions
Cloud Backup
All versions
Data Availability Services
All versions
E Series Santricity Os Controller
From 11.0 to 11.70.2
Fas/aff Baseboard Management Controller
All versions
Solidfire & Hci Management Node
All versions
Solidfire Baseboard Management Controller
All versions
Steelstore Cloud Integrated Storage
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H610s Firmware
All versions
Running on/withPlatform Versions
Netapp
H610s
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
8300 Firmware
All versions
Running on/withPlatform Versions
Netapp
8300
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
8700 Firmware
All versions
Running on/withPlatform Versions
Netapp
8700
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
A400 Firmware
All versions
Running on/withPlatform Versions
Netapp
A400
All versions

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (12)

Source: cve@mitre.org
Broken LinkThird Party Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.