NULL pointer dereference in Linux kernel - CVE-2019-16229

Vulnerability identifier: #VU21315

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-16229

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists because of a NULL pointer dereference error in the "drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c" file due to the affected software does not check the "alloc_workqueue" return value. A remote attacker can perform a denial of service (DoS) attack.

Linux kernel
Ubuntu
linux-kvm (Ubuntu package)
linux-snapdragon (Ubuntu package)
linux-hwe (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux (Ubuntu package)
linux-raspi2 (Ubuntu package)
linux-aws (Ubuntu package)
linux-oracle (Ubuntu package)
linux-gke-4.15 (Ubuntu package)
linux-aws-hwe (Ubuntu package)
linux-oracle-5.0 (Ubuntu package)
linux-gke-5.0 (Ubuntu package)
linux-aws-5.0 (Ubuntu package)
linux-azure-5.3 (Ubuntu package)
linux-gcp-5.3 (Ubuntu package)
linux-raspi2-5.3 (Ubuntu package)

Install update from vendor's website.

Linux kernel - update to 5.2.15
linux-kvm (Ubuntu package) - addressed in versions 4.15.0-1053.53, 5.3.0-1010.11
linux-snapdragon (Ubuntu package) - update to 4.15.0-1072.79
linux-hwe (Ubuntu package) - addressed in versions 4.15.0-88.88~16.04.1, 5.3.0-40.32~18.04.1
linux-gcp (Ubuntu package) - addressed in versions 4.15.0-1055.59, 5.0.0-1031.32, 5.3.0-1012.13
linux-azure (Ubuntu package) - addressed in versions 4.15.0-1071.76, 5.0.0-1032.34, 5.3.0-1013.14
linux (Ubuntu package) - addressed in versions 4.15.0-88.88, 5.3.0-40.32
linux-raspi2 (Ubuntu package) - addressed in versions 4.15.0-1055.59, 5.3.0-1018.20
linux-aws (Ubuntu package) - addressed in versions 4.15.0-1060.62, 5.3.0-1011.12
linux-oracle (Ubuntu package) - addressed in versions 4.15.0-1033.36~16.04.1, 4.15.0-1033.36, 5.3.0-1009.10
linux-gke-4.15 (Ubuntu package) - update to 4.15.0-1052.55
linux-aws-hwe (Ubuntu package) - update to 4.15.0-1060.62~16.04.1
linux-oracle-5.0 (Ubuntu package) - update to 5.0.0-1011.16
linux-gke-5.0 (Ubuntu package) - update to 5.0.0-1030.31
linux-aws-5.0 (Ubuntu package) - update to 5.0.0-1025.28
linux-azure-5.3 (Ubuntu package) - update to 5.3.0-1013.14~18.04.1
linux-gcp-5.3 (Ubuntu package) - update to 5.3.0-1012.13~18.04.1
linux-raspi2-5.3 (Ubuntu package) - update to 5.3.0-1018.20~18.04.1

• https://lkml.org/lkml/2019/9/9/487

• NULL pointer dereference in Linux kernel
• Ubuntu update for linux, linux-aws, linux-azure and more
• Ubuntu update for linux, linux-aws, linux-aws-hwe and more
• Ubuntu update for linux-aws-5.0, linux-azure, linux-gcp and more