NULL Pointer Dereference in Linux Kernel Radeon Display Driver (CVE-2019-16230)
Summary
CVE-2019-16230: drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is an open-source monolithic Unix-like computer operating system kernel. It is responsible for managing the system's hardware and software resources and providing essential services for all other parts of the operating system. The Radeon display driver is a component of the Linux kernel that provides support for AMD Radeon graphics cards. This vulnerability affects versions 5.2.14 of the Linux kernel.
Vulnerability Detail
The vulnerability (CVE-2019-16230) exists in the radeon_display.c file of the Linux kernel's Radeon display driver. It occurs due to a lack of proper checking of the alloc_workqueue return value, leading to a NULL pointer dereference. This vulnerability can be exploited by an attacker to cause a denial-of-service (NULL pointer dereference) condition. However, it is important to note that the work queue allocation happens during device initialization, which occurs during boot and is not attacker controllable. The likelihood of an out-of-memory (OOM) condition at that time is highly unlikely.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The NULL pointer dereference vulnerability in the Linux kernel's Radeon display driver (CVE-2019-16230) can lead to a denial-of-service condition. It is important to keep the Linux kernel up to date with the latest security patches to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The Linux kernel is an open-source monolithic Unix-like computer operating system kernel. It is responsible for managing the system's hardware and software resources and providing essential services for all other parts of the operating system.
The Radeon display driver is a component of the Linux kernel that provides support for AMD Radeon graphics cards.
A NULL pointer dereference occurs when a program attempts to access or manipulate memory using a null pointer, which does not point to a valid memory location. This can lead to crashes or other unexpected behavior.
This vulnerability can be exploited by an attacker to cause a denial-of-service (NULL pointer dereference) condition. However, it is important to note that the work queue allocation happens during device initialization, which occurs during boot and is not attacker controllable. The likelihood of an out-of-memory (OOM) condition at that time is highly unlikely.
To protect your system, it is recommended to update the Linux kernel to a version that includes the necessary patch. Regularly checking for updates from your Linux distribution provider or directly from the Linux kernel website is advised.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
