An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: The vendor disputes this issues as not being a vulnerability because kstrdup() returning NULL is handled sufficiently and there is no chance for a NULL pointer dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | * | 5.1.5 (including) |
| Red Hat Enterprise Linux 7 | RedHat | kernel-rt-0:3.10.0-1127.rt56.1093.el7 | * |
| Red Hat Enterprise Linux 7 | RedHat | kernel-0:3.10.0-1127.el7 | * |
| Red Hat Enterprise Linux 7.7 Extended Update Support | RedHat | kernel-0:3.10.0-1062.26.1.el7 | * |
| Red Hat Enterprise Linux 8 | RedHat | kernel-0:4.18.0-147.el8 | * |