NULL pointer dereference in Linux kernel - CVE-2019-15099

Vulnerability identifier: #VU20913

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-15099

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the "drivers/net/wireless/ath/ath10k/usb.c". A remote attacker can trigger denial of service conditions via an incomplete address in an endpoint descriptor.

Linux kernel
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
kernel-alt (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)

Install update from vendor's website.

Linux kernel - update to 5.2.9
kernel-alt (Red Hat package) - update to 4.14.0-115.19.1.el7a
kernel (Red Hat package) - update to 4.18.0-193.el8
kernel-rt (Red Hat package) - update to 4.18.0-193.rt13.51.el8

• https://lore.kernel.org/linux-wireless/20190804003101.11541-1-benquike@gmail.com/T/#u

• NULL pointer dereference in Linux kernel
• Red Hat Enterprise Linux 7 update for kernel-alt
• Red Hat Enterprise Linux 8 update for kernel-rt
• Red Hat Enterprise Linux 8 update for kernel