UBUNTU-CVE-2019-12455

Dashboard / Vulnerabilities / UBUNTU-CVE-2019-12455

UBUNTU-CVE-2019-12455

Summary:

Details: An issue was discovered in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. There is an unchecked kstrndup of derived_name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: This id is disputed as not being an issue because “The memory allocation that was not checked is part of a code that only runs at boot time, before user processes are started. Therefore, there is no possibility for an unprivileged user to control it, and no denial of service.”

References: https://ubuntu.com/security/CVE-2019-12455, https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fcdf445ff42f036d22178b49cf64e92d527c1330, https://www.mail-archive.com/[email protected]/msg2010240.html, https://www.cve.org/CVERecord?id=CVE-2019-12455