NVD Vulnerability Detail

CVE-2019-18680

Summary	An issue was discovered in the Linux kernel 4.4.x before 4.4.195. There is a NULL pointer dereference in rds_tcp_kill_sock() in net/rds/tcp.c that will cause denial of service, aka CID-91573ae4aed0.
Publication Date	Nov. 5, 2019, 12:15 a.m.
Registration Date	Jan. 26, 2021, 11:40 a.m.
Last Update	Nov. 21, 2024, 1:33 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:linux:linux_kernel::::::::		4.4.179			4.4.195

Related information, measures and tools

No	URL	タグ
1	https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.195	Exploit Patch Vendor Advisory
2	https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.195	Exploit Patch Vendor Advisory
3	https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=91573ae4aed0a49660abdad4d42f2a0db995ee5e	Patch Vendor Advisory
4	https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=91573ae4aed0a49660abdad4d42f2a0db995ee5e	Patch Vendor Advisory
5	https://github.com/torvalds/linux/commit/91573ae4aed0a49660abdad4d42f2a0db995ee5e	Patch Third Party Advisory
6	https://github.com/torvalds/linux/commit/91573ae4aed0a49660abdad4d42f2a0db995ee5e	Patch Third Party Advisory
7	https://lkml.org/lkml/2019/9/18/337	Exploit Mailing List Vendor Advisory
8	https://lkml.org/lkml/2019/9/18/337	Exploit Mailing List Vendor Advisory
9	https://security.netapp.com/advisory/ntap-20191205-0001/	Third Party Advisory
10	https://security.netapp.com/advisory/ntap-20191205-0001/	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-476	NULL ポインタデリファレンス	https://cwe.mitre.org/data/definitions/476.html

JVN Vulnerability Information

Linux Kernel における NULL ポインタデリファレンスに関する脆弱性

Title	Linux Kernel における NULL ポインタデリファレンスに関する脆弱性
Summary	Linux Kernel には、NULL ポインタデリファレンスに関する脆弱性が存在します。ベンダは、本脆弱性を CID-91573ae4aed0 として公開しています。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 5, 2019, midnight
Registration Date	Nov. 8, 2019, 3:39 p.m.
Last Update	Nov. 8, 2019, 3:39 p.m.

Affected System

Linux

Linux Kernel 4.4.195 未満の 4.4.x

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2019-18680	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18680
National Vulnerability Database (NVD)
2	CVE-2019-18680	https://nvd.nist.gov/vuln/detail/CVE-2019-18680

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-476	http://cwe.mitre.org/data/definitions/476.html

ベンダー情報

No	Name	URL
ChangeLog
1	ChangeLog-4.4.195	https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.195
GitHub
2	net: rds: Fix NULL ptr use in rds_tcp_kill_sock	https://github.com/torvalds/linux/commit/91573ae4aed0a49660abdad4d42f2a0db995ee5e
Linux Kernel
3	Linux Kernel Archives	http://www.kernel.org
Linux kernel source tree
4	net: rds: Fix NULL ptr use in rds_tcp_kill_sock	https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=91573ae4aed0a49660abdad4d42f2a0db995ee5e
LKML.ORG
5	[PATCH stable 4.4 net] net: rds: Fix NULL ptr use in rds_tcp_kill_sock	https://lkml.org/lkml/2019/9/18/337

Change Log

No	Changed Details	Date of change
1	[2019年11月08日] 掲載	Nov. 8, 2019, 3:39 p.m.