CVE-2019-12380

**DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolog in arch/x86/platform/efi/efi_64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because “All the code touched by the referenced commit runs only at boot, before any user processes are started. Therefore, there is no possibility for an unprivileged user to control it.”.

• CWE-388

• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
• http://www.securityfocus.com/bid/108477Third Party Advisory, VDB Entry
• https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=4e78921ba4dd0aca1cc89168f45039add4183f8eMailing List, Patch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J36BIJTKEPUOZKJNHQBUZA47RQONUKOI/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLGWJKLMTBBB53D5QLS4HOY2EH246WBE/
• https://security.netapp.com/advisory/ntap-20190710-0002/
• https://usn.ubuntu.com/4414-1/
• https://usn.ubuntu.com/4427-1/
• https://usn.ubuntu.com/4439-1/
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
• http://www.securityfocus.com/bid/108477Third Party Advisory, VDB Entry
• https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=4e78921ba4dd0aca1cc89168f45039add4183f8eMailing List, Patch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J36BIJTKEPUOZKJNHQBUZA47RQONUKOI/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLGWJKLMTBBB53D5QLS4HOY2EH246WBE/
• https://security.netapp.com/advisory/ntap-20190710-0002/
• https://usn.ubuntu.com/4414-1/
• https://usn.ubuntu.com/4427-1/
• https://usn.ubuntu.com/4439-1/

Published

May 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12375Open directories in Ivanti LANDESK Management Suite (LDMS, a…
• CVE-2019-12376Use of a hard-coded encryption key in Ivanti LANDESK Managem…
• CVE-2019-12377A vulnerable upl/async_upload.asp web API endpoint in Ivanti…
• CVE-2019-12378An issue was discovered in ip6_ra_control in net/ipv6/ipv6_s…
• CVE-2019-12379An issue was discovered in con_insert_unipair in drivers/tty…
• CVE-2019-1238A remote code execution vulnerability exists in the way that…6.4
• CVE-2019-12381An issue was discovered in ip_ra_control in net/ipv4/ip_sock…
• CVE-2019-12382An issue was discovered in drm_load_edid_firmware in drivers…
• CVE-2019-12383Tor Browser before 8.0.1 has an information exposure vulnera…4.3
• CVE-2019-12384FasterXML jackson-databind 2.x before 2.9.9.1 might allow at…5.9
• CVE-2019-12385An issue was discovered in Ampache through 3.9.1. The search…
• CVE-2019-12386An issue was discovered in Ampache through 3.9.1. A stored X…