CVE-2019-12615: Linux Kernel

High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days.

An issue was discovered in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup_const of node_info->vdev_port.name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).

Affected products

• Linux Linux Kernel: from 2.6.12.1, before 4.14.130 (fixed in 4.14.130); from 4.19, before 4.19.56 (fixed in 4.19.56); from 5.1, before 5.1.15 (fixed in 5.1.15); version 2.6.12 only; version 5.2 only
• Netapp Active Iq Unified Manager: from 9.5
• Netapp Aff a700s Firmware: affected versions not specified
• Netapp CN1610 Firmware: affected versions not specified
• Netapp h610s Firmware: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Solidfire: affected versions not specified

Published 2019-06-03. Last modified 2026-06-17.