CVE-2019-12615

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.1.6

Description An issue was discovered in the get vdev port node info function in arch/sparc/kernel/mdesc.c. There is an unchecked kstrdup const of node info->vdev port.name, which might allow an attacker to cause a denial of service, resulting in a NULL pointer dereference and system crash.

Recommendations For Linux kernel versions through 5.1.6, update to a version later than 5.1.6 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific issue.