7.8

CVE-2019-12615: linux linux_kernel NULL Pointer Dereference

CVSS: 7.8v2.0HighModified
AliasesUBUNTU-CVE-2019-12615DEBIAN-CVE-2019-12615
Published 03-06-2019Last modified 04-08-2024
Open JSON

Vulnerability summary

CVE-2019-12615 is a high (CVSS 7.8) NULL Pointer Dereference vulnerability in linux linux_kernel. EPSS estimates a 3.92% chance of exploitation in the next 30 days, higher than 90.2% of scored vulnerabilities.

Overall risk
32/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v2.0 (NVD)
EPSS score
3.92%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 03-06-2019
    PublishedVulnerability first disclosed.
  2. 04-08-2024
    Last modifiedVulnerability information updated.

Description

An issue was discovered in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup_const of node_info->vdev_port.name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

3.92%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

0.00 pp

From 3.92% on 19-09-2026

19-09-202619-10-2026
EPSS score
3.92%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu11 products
  • linux-aws-fips< 4.15.0-2018.18 | All versions (No fix recorded)
  • linux-azure< 4.15.0-1059.64~14.04.1
  • linux-azure-fdeAll versions (No fix recorded)
  • linux-azure-fips< 4.15.0-2006.7 | All versions (No fix recorded)
  • linux-gcp-fipsAll versions (No fix recorded)
Netapp6 products
Debian1 product
  • linux< 5.2.6-1
Linux1 product
  • linux_kernel≥ 2.6.12.1, < 4.14.130 | ≥ 4.19, < 4.19.56 | ≥ 5.1, < 5.1.15 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5 | 2.6.12:rc6 | 5.2:rc1 | 5.2:rc2 | 5.2:rc3 | 5.2:rc4

4 vendors · 19 products

References

10 links