VDB

CVE-2019-11810

CVE-2019-11810 PUBLISHED

Reported by mitre · Published May 7, 2019

An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
linux-oracleUbuntu:16.04:LTS4.15.0-1022.25~16.04.1
linux-raspi2Ubuntu:18.04:LTS4.15.0-1044.47
linux-awsUbuntu:16.04:LTS4.4.0-1084.94
linux_kernellinux5.0.7, 4.19.34, 4.14.111, 4.9.168, 4.4.179, 3.18.139, 3.16.69
linux-azure-fipsUbuntu:Pro:FIPS-updates:18.04:LTS4.15.0-2006.7
linux-hwe-edgeUbuntu:18.04:LTS5.0.0-16.17~18.04.1
linux-awsUbuntu:Pro:14.04:LTS4.4.0-1054.58
linux-snapdragonUbuntu:16.04:LTS4.4.0-1114.119
linux-raspi2Ubuntu:16.04:LTS4.4.0-1110.118
linux-aws-fipsUbuntu:Pro:FIPS-updates:18.04:LTS4.15.0-2018.18
linux-oemUbuntu:18.04:LTS4.15.0-1056.65
linux-kvmUbuntu:16.04:LTS4.4.0-1047.53

7 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
n/an/an/a
n/an/a*

Timeline

  • May 7, 2019 CVE Published
  • Apr 14, 2021 EPSS Score (30 in total, the first dated here)
  • Feb 23, 2026 CVE Updated
  • Mar 6, 2026 Distribution Patch (28 in total, the first dated here)
  • Mar 6, 2026 Security Advisory (34 in total, the first dated here)
  • Sep 15, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2019-11810
vulnetix vdb fixes CVE-2019-11810

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2019-11810/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

…and 2 more

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›