CVE-2019-16232

drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

Published: Sep 11, 2019
Updated: Apr 13, 2023
CVE: CVE-2019-16232
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.1
AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Low
Score: 4.7
AV:L/AC:M/Au:N/C:N/I:N/A:C

CWEs:

CWE-476

Affected Software
References

Software	From	Fixed in
linux / linux_kernel	5.2.14	5.2.14.x
canonical / ubuntu_linux	16.04	16.04.x
canonical / ubuntu_linux	18.04	18.04.x
opensuse / leap	15.0	15.0.x
fedoraproject / fedora	30	30.x
canonical / ubuntu_linux	14.04	14.04.x
opensuse / leap	15.1	15.1.x
canonical / ubuntu_linux	19.10	19.10.x
fedoraproject / fedora	31	31.x

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html
https://lists.fedoraproject.org/archives/list/[email protected]/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/
https://lists.fedoraproject.org/archives/list/[email protected]/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/
https://lkml.org/lkml/2019/9/9/487
https://security.netapp.com/advisory/ntap-20191004-0001/
https://usn.ubuntu.com/4284-1/
https://usn.ubuntu.com/4285-1/
https://usn.ubuntu.com/4287-1/
https://usn.ubuntu.com/4287-2/

Vulnerability Database

290,020

CVE-2019-16232