CVE-2019-19965
MEDIUM 4.7EPSS 0.7%
In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.
- CVSS v3.1 NVD
- 4.7 MEDIUM
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS v2.0 NVD
- 1.9 LOW
AV:L/AC:M/Au:N/C:N/I:N/A:P - EPSS
- 0.65% chance of exploitation in the next 30 days, 50th percentile
- Published
- 2019-12-25
- Updated
- 2026-10-08
Proof-of-concept exploits (1)
Security advisories
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
- https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
- https://security.netapp.com/advisory/ntap-20200204-0002
- https://usn.ubuntu.com/4284-1
- https://usn.ubuntu.com/4285-1
- https://usn.ubuntu.com/4286-1
- https://usn.ubuntu.com/4286-2
- https://usn.ubuntu.com/4287-1
- https://usn.ubuntu.com/4287-2