Null Pointer Dereference in Linux Kernel - Package: linux
Summary
DEBIAN-CVE-2019-16229: drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 'linux' package is a core component of the Debian operating system, providing the Linux kernel that manages hardware resources and enables system functionality. It is essential for running applications and services on Debian systems. The kernel is responsible for handling system calls, managing memory, and controlling hardware devices. This vulnerability affects multiple versions of the Linux kernel across various Debian releases, highlighting the importance of maintaining an updated and secure kernel.
Vulnerability Detail
The vulnerability identified as CVE-2019-16229 originates from the Linux kernel version 5.2.14, specifically in the file kfd_interrupt.c located in the AMD GPU driver section. The issue arises from a failure to check the return value of the alloc_workqueue function, which can lead to a NULL pointer dereference. This could potentially cause system instability or crashes, although the security community has debated the severity of this issue, suggesting it may not warrant a CVE ID.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds documented for this vulnerability. It is advisable to keep the system updated to mitigate potential risks associated with this issue.
Conclusion
CVE-2019-16229 represents a vulnerability in the Linux kernel that could lead to system instability due to a NULL pointer dereference. Users are encouraged to update their systems to the latest version of the 'linux' package to mitigate risks associated with this vulnerability.
See every vulnerability recorded for linux →
FAQ
CVE-2019-16229 is a vulnerability in the Linux kernel that can lead to a NULL pointer dereference due to improper handling of the alloc_workqueue return value.
The vulnerability affects multiple Debian versions, including Debian 11, 12, 13, and 14, all using the 'linux' package.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability could lead to system crashes or instability, although its severity is debated within the security community.
Yes, a patch is available. It is recommended to update the 'linux' package to the latest version to ensure your system is secure.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
