CVE-2019-11810

HIGH

7.5

CVSS Score

Published: May 7, 2019 at 01:04 PM UTC

Updated: June 17, 2026 at 02:13 AM UTC

3 products affected across 3 vendorsLinux KernelDebian LinuxUbuntu Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 6%

Description

An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

14.04 16.04 18.04 19.04

Debian Linux · Debiandrupal

95%

8.0

Linux Kernel · Linux

95%

v < 3.16.693.17 ≤ v < 3.18.1393.19 ≤ v < 4.4.1794.10 ≤ v < 4.14.1114.15 ≤ v < 4.19.344.20 ≤ v < 5.0.74.5 ≤ v < 4.9.168

Affected range stops below 3.16.69, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.18.139, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.14.111, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.34, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.4.179, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.168, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.0.7, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (22)

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/108286