UBUNTU-CVE-2019-16233
Vulnerability Summary
Timeline
Description
drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
CVSS Metrics
- v3.1•MEDIUM•Score: 4.1CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected Systems
- ubuntu•linux
all | < 4.4.0-178.208 | < 4.15.0-74.84
- ubuntu•linux-aws
< 4.4.0-1066.70 | < 4.4.0-1106.117 | < 4.15.0-1057.59
- ubuntu•linux-aws-5.0
< 5.0.0-1023.26~18.04.1
- ubuntu•linux-aws-fips
< 4.15.0-2018.18 | all
- ubuntu•linux-aws-hwe
< 4.15.0-1057.59~16.04.1
- ubuntu•linux-azure
< 4.15.0-1066.71~14.04.1 | < 4.15.0-1066.71 | < 5.0.0-1028.30~18.04.1
- ubuntu•linux-azure-5.3
< 5.3.0-1008.9~18.04.1
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fips
< 4.15.0-2006.7 | all
- ubuntu•linux-bluefield
all
- ubuntu•linux-fips
< 4.4.0-1033.38 | all
- ubuntu•linux-gcp
< 4.15.0-1052.56 | < 5.0.0-1028.29~18.04.1
- ubuntu•linux-gcp-5.3
< 5.3.0-1009.10~18.04.1
- ubuntu•linux-gcp-edge
all
- ubuntu•linux-gcp-fips
all
- ubuntu•linux-gke
all
- ubuntu•linux-gke-4.15
< 4.15.0-1050.53
- ubuntu•linux-gke-5.0
< 5.0.0-1027.28~18.04.1
- ubuntu•linux-hwe
< 4.15.0-74.83~16.04.1 | < 5.3.0-26.28~18.04.1
- ubuntu•linux-hwe-edge
all | all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-kvm
< 4.4.0-1070.77 | < 4.15.0-1052.52
- ubuntu•linux-lts-xenial
< 4.4.0-178.208~14.04.1
- ubuntu•linux-nvidia
all
- ubuntu•linux-oem
< 4.15.0-1066.76
- ubuntu•linux-oem-osp1
< 5.0.0-1033.38
- ubuntu•linux-oracle
< 4.15.0-1031.34~16.04.1 | < 4.15.0-1031.34
- ubuntu•linux-oracle-5.0
< 5.0.0-1009.14~18.04.1
- ubuntu•linux-raspi-realtime
all
- ubuntu•linux-raspi2
< 4.4.0-1132.141 | < 4.15.0-1053.57 | all
- ubuntu•linux-realtime
all
- ubuntu•linux-riscv
all | all
- ubuntu•linux-snapdragon
< 4.4.0-1136.144 | < 4.15.0-1070.77
References (7)
- https://ubuntu.com/security/CVE-2019-16233
- https://lkml.org/lkml/2019/9/9/487
- https://ubuntu.com/security/notices/USN-4226-1
- https://ubuntu.com/security/notices/USN-4227-1
- https://ubuntu.com/security/notices/USN-4227-2
- https://ubuntu.com/security/notices/USN-4346-1
- https://www.cve.org/CVERecord?id=CVE-2019-16233