Description
A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://github.com/torvalds/linux/commit/385097a3675749cbc9e97c085c0e5dfe4269ca51 ↗
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.13 ↗
- http://www.securityfocus.com/bid/108905 ↗
- https://security.netapp.com/advisory/ntap-20190806-0001/ ↗
- https://www.debian.org/security/2019/dsa-4495 ↗
- https://seclists.org/bugtraq/2019/Aug/13 ↗
- https://usn.ubuntu.com/4093-1/ ↗
- https://usn.ubuntu.com/4094-1/ ↗
- http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html ↗
- https://usn.ubuntu.com/4117-1/ ↗
- https://usn.ubuntu.com/4118-1/ ↗