Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2019-12380: Linux kernel boot code may crash due to memory error
CVE-2019-12380 · published 7 years ago
Summary
The early start-up part of the Linux kernel that deals with the hardware interface can mishandle a failed memory request, potentially causing the system to stop during boot. This affects several Linux distributions that use the affected kernel version, such as Debian and Canonical cloud images. Update to a kernel version that includes the patch or apply the provided security update to avoid boot failures.
What to do
- Update debian rootio-linux to version 6.1.159-1.root.io.75.
- Update canonical linux-aws to version 4.4.0-1075.79.
- Update canonical linux-azure to version 4.15.0-1091.101~14.04.1.
- Update canonical linux-lts-xenial to version 4.4.0-186.216~14.04.1.
- Update canonical linux to version 4.4.0-186.216.
- Update canonical linux-aws to version 4.4.0-1111.123.
- Update canonical linux-aws-hwe to version 4.15.0-1079.83~16.04.1.
- Update canonical linux-azure to version 4.15.0-1091.101~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1080.90~16.04.1.
- Update canonical linux-hwe to version 4.15.0-112.113~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1077.84.
- Update canonical linux-oracle to version 4.15.0-1050.54~16.04.1.
- Update canonical linux-raspi2 to version 4.4.0-1136.145.
- Update canonical linux-snapdragon to version 4.4.0-1140.148.
- Update canonical linux-fips to version 4.4.0-1043.48.
- Update canonical linux to version 4.15.0-109.110.
- Update canonical linux-aws to version 4.15.0-1077.81.
- Update canonical linux-azure-4.15 to version 4.15.0-1091.101.
- Update canonical linux-gcp-4.15 to version 4.15.0-1080.90.
- Update canonical linux-gke-4.15 to version 4.15.0-1064.67.
- Update canonical linux-hwe to version 5.3.0-26.28~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1069.70.
- Update canonical linux-oem to version 4.15.0-1091.101.
- Update canonical linux-oem-osp1 to version 5.0.0-1065.70.
- Update canonical linux-oracle to version 4.15.0-1048.52.
- Update canonical linux-raspi2 to version 4.15.0-1065.69.
- Update canonical linux-snapdragon to version 4.15.0-1081.88.
- Update canonical linux-aws-fips to version 4.15.0-2022.22.
- Update canonical linux-azure-fips to version 4.15.0-2006.7.
- Update canonical linux-fips to version 4.15.0-1037.42.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.159-1.root.io.75 Fix: upgrade to 6.1.159-1.root.io.75
|
| Ubuntu:26.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1075.79 Fix: upgrade to 4.4.0-1075.79
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1091.101~14.04.1 Fix: upgrade to 4.15.0-1091.101~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-186.216~14.04.1 Fix: upgrade to 4.4.0-186.216~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:16.04:LTS | canonical | linux |
< 4.4.0-186.216 Fix: upgrade to 4.4.0-186.216
|
| Ubuntu:16.04:LTS | canonical | linux-aws |
< 4.4.0-1111.123 Fix: upgrade to 4.4.0-1111.123
|
| Ubuntu:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1079.83~16.04.1 Fix: upgrade to 4.15.0-1079.83~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-azure |
< 4.15.0-1091.101~16.04.1 Fix: upgrade to 4.15.0-1091.101~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1080.90~16.04.1 Fix: upgrade to 4.15.0-1080.90~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe |
< 4.15.0-112.113~16.04.1 Fix: upgrade to 4.15.0-112.113~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1077.84 Fix: upgrade to 4.4.0-1077.84
|
| Ubuntu:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1050.54~16.04.1 Fix: upgrade to 4.15.0-1050.54~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-raspi2 |
< 4.4.0-1136.145 Fix: upgrade to 4.4.0-1136.145
|
| Ubuntu:16.04:LTS | canonical | linux-snapdragon |
< 4.4.0-1140.148 Fix: upgrade to 4.4.0-1140.148
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1043.48 Fix: upgrade to 4.4.0-1043.48
|
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-109.110 Fix: upgrade to 4.15.0-109.110
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1077.81 Fix: upgrade to 4.15.0-1077.81
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1091.101 Fix: upgrade to 4.15.0-1091.101
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1080.90 Fix: upgrade to 4.15.0-1080.90
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 |
< 4.15.0-1064.67 Fix: upgrade to 4.15.0-1064.67
|
| Ubuntu:18.04:LTS | canonical | linux-hwe |
< 5.3.0-26.28~18.04.1 Fix: upgrade to 5.3.0-26.28~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1069.70 Fix: upgrade to 4.15.0-1069.70
|
| Ubuntu:18.04:LTS | canonical | linux-oem |
< 4.15.0-1091.101 Fix: upgrade to 4.15.0-1091.101
|
| Ubuntu:18.04:LTS | canonical | linux-oem-osp1 |
< 5.0.0-1065.70 Fix: upgrade to 5.0.0-1065.70
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1048.52 Fix: upgrade to 4.15.0-1048.52
|
| Ubuntu:18.04:LTS | canonical | linux-raspi2 |
< 4.15.0-1065.69 Fix: upgrade to 4.15.0-1065.69
|
| Ubuntu:18.04:LTS | canonical | linux-snapdragon |
< 4.15.0-1081.88 Fix: upgrade to 4.15.0-1081.88
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2022.22 Fix: upgrade to 4.15.0-2022.22
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2006.7 Fix: upgrade to 4.15.0-2006.7
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1037.42 Fix: upgrade to 4.15.0-1037.42
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos | All versions |
Showing 50 of 54. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | linux | All versions |
| – | linux | linux_kernel |
<= 5.1.5 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
Original advisory text
CVE-2019-12380 in linux - Patched by Root
**DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolog in arch/x86/platform/efi/efi_64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because “All the code touched by the referenced commit runs only at boot, before any user processes are started. Therefore, there is no possibility for an unprivileged user to control it.”.
References
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
- http://www.securityfocus.com/bid/108477 Third Party Advisory VDB Entry
- https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=4e78921ba... Mailing List Patch Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
- https://security.netapp.com/advisory/ntap-20190710-0002/
- https://usn.ubuntu.com/4414-1/
- https://usn.ubuntu.com/4427-1/
- https://usn.ubuntu.com/4439-1/
- https://security-tracker.debian.org/tracker/CVE-2019-12380 Vendor Advisory
- https://ubuntu.com/security/CVE-2019-12380 Third Party Advisory
- https://ubuntu.com/security/notices/USN-4414-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-4427-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-4439-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2019-12380 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-3887PK - Errors
Timeline
Published28 May 2019
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta