CVE-2019-12818

An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfc_llcp_build_gb in net/nfc/llcp_core.c.

• CWE-476

• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
• http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html
• http://www.securityfocus.com/bid/108776Third Party Advisory, VDB Entry
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=58bdd544e2933a21a51eecf17c3f5f94038261b5Mailing List, Patch, Vendor Advisory
• https://github.com/torvalds/linux/commit/58bdd544e2933a21a51eecf17c3f5f94038261b5Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20190710-0002/
• https://support.f5.com/csp/article/K91444306
• https://usn.ubuntu.com/4094-1/
• https://usn.ubuntu.com/4118-1/
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.15Mailing List, Release Notes, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
• http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html
• http://www.securityfocus.com/bid/108776Third Party Advisory, VDB Entry
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=58bdd544e2933a21a51eecf17c3f5f94038261b5Mailing List, Patch, Vendor Advisory
• https://github.com/torvalds/linux/commit/58bdd544e2933a21a51eecf17c3f5f94038261b5Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20190710-0002/
• https://support.f5.com/csp/article/K91444306
• https://usn.ubuntu.com/4094-1/
• https://usn.ubuntu.com/4118-1/
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.15Mailing List, Release Notes, Vendor Advisory

Published

Jun 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12812MyBuilder viewer before 6.2.2019.814 allow an attacker to ex…9.8
• CVE-2019-12813An issue was discovered in Digital Persona U.are.U 4500 Fing…
• CVE-2019-12814A Polymorphic Typing issue was discovered in FasterXML jacks…5.9
• CVE-2019-12815An arbitrary file copy vulnerability in mod_copy in ProFTPD …9.8
• CVE-2019-12816Modules.cpp in ZNC before 1.7.4-rc1 allows remote authentica…
• CVE-2019-12817arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel b…7
• CVE-2019-12819An issue was discovered in the Linux kernel before 5.0. The …
• CVE-2019-1282An information disclosure exists in the Windows Common Log F…5.5
• CVE-2019-12820A vulnerability was found in the app 2.0 of the Shenzhen Jis…
• CVE-2019-12821A vulnerability was found in the app 2.0 of the Shenzhen Jis…
• CVE-2019-12822In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5…
• CVE-2019-12823Craft CMS before 3.1.31 does not properly filter XML feeds a…6.1