CVE-2019-12614
Published: 03 June 2019
An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop->name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).
From the Ubuntu security team
It was discovered that the PowerPC dlpar implementation in the Linux kernel did not properly check for allocation errors in some situations. A local attacker could possibly use this to cause a denial of service (system crash).
Priority
Low
CVSS 3 base score: 4.1
Status
| Package | Release | Status |
|---|---|---|
|
linux Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(4.15.0-58.64)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Released
(4.4.0-159.187)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Ignored
(was needs-triage ESM criteria)
|
|
|
Patches: Introduced by ab519a011caa5ec47d992cb8a4fc8e7af9b9e3f8 Fixed by efa9ace68e487ddd29c2b4d6dd23242158f1f607 |
||
|
linux-aws Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Released
(4.4.0-1054.58)
|
|
|
linux-aws-5.0 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(5.0.0-1021.24~18.04.1)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-azure Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Ignored
(was needs-triage ESM criteria)
|
|
|
linux-azure-5.3 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(5.3.0-1007.8~18.04.1)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-euclid Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Ignored
(was needs-triage now end-of-life)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-flo Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Ignored
(abandoned)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gcp Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gcp-5.3 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(5.3.0-1008.9~18.04.1)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gcp-edge Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gke Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Ignored
(end-of-life)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(4.15.0-1040.42)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(5.0.0-1013.13~18.04.1)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-goldfish Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Ignored
(end-of-life)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-grouper Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-hwe Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(5.0.0-25.26~18.04.1)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Released
(4.15.0-58.64~16.04.1)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Ignored
(was pending \[5.3.0-19.20~18.04.2\] now end-of-life)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Released
(4.15.0-58.64~16.04.1)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-kvm Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-lts-trusty Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-lts-utopic Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-lts-vivid Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-lts-wily Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Released
(4.4.0-164.192~14.04.1)
|
|
|
linux-maguro Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-mako Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Ignored
(abandoned)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-manta Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-oem Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Ignored
(was needs-triage now end-of-life)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-oem-5.4 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Does not exist
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-oem-osp1 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Released
(5.0.0-1018.20)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-oracle Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-oracle-5.0 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(5.0.0-1007.12~18.04.1)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-raspi2-5.3 Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(5.3.0-1017.19~18.04.1)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
Upstream |
Released
(5.3~rc1)
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(CONFIG_PPC_PSERIES is not enabled)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
Notes
| Author | Note |
|---|---|
| tyhicks | Ubuntu kernels that are not built for IBM POWER are unaffected |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12614
- https://lkml.org/lkml/2019/6/3/526
- https://ubuntu.com/security/notices/USN-4093-1
- https://ubuntu.com/security/notices/USN-4094-1
- https://ubuntu.com/security/notices/USN-4095-1
- https://ubuntu.com/security/notices/USN-4095-2
- NVD
- Launchpad
- Debian