CVE-2026-19411: NULL Pointer Dereference in Red Hat Red Hat Enterprise Linux 7
CVE-2026-19411 is a NULL pointer dereference vulnerability in the shim application's dp.c library used by the UEFI bootloader on Red Hat Enterprise Linux 7. This flaw can cause system instability or denial of service by crashing the process that handles the bootloader. The vulnerability requires local access with high privileges and does not involve user interaction. Red Hat rates the impact as moderate, with potential effects on system availability and integrity. No official patch or fix status is confirmed in the advisory, but mitigation can be applied by adding NULL pointer checks in the code.
AI Analysis
Technical Summary
This vulnerability involves a NULL pointer dereference in the shim application's dp.c library, specifically in the function is_removable_media_path() when DevicePathToStr() returns NULL. The missing NULL pointer checks can cause the process to crash, leading to denial of service on systems using the shim UEFI bootloader. The vulnerability requires local access with high privileges and has a CVSS v3.1 base score of 3.9 (low severity). Red Hat classifies the impact as moderate due to possible system instability, local denial of service, or corruption of system integrity and availability. The vendor advisory suggests code modifications to include NULL pointer checks as mitigation but does not confirm an official patch or fix release yet.
Potential Impact
The vulnerability can cause denial of service by crashing the shim process during UEFI boot, potentially making the system unstable or unavailable. It requires local access with high privileges and does not affect confidentiality. Integrity impact is low, and no remote exploitation or user interaction is needed. There are no known exploits in the wild. The flaw may also corrupt system integrity and availability in some cases.
Mitigation Recommendations
Red Hat advises modifying the code to include NULL pointer checks in the affected functions to prevent the NULL pointer dereference. Specific code changes include checks before calling DevicePathToStr and verifying pointers before use. No official patch or fix is currently confirmed; users should monitor the Red Hat advisory for updates. Until a fix is released, applying the suggested code-level mitigations can reduce risk.
CVE-2026-19411: NULL Pointer Dereference in Red Hat Red Hat Enterprise Linux 7
Description
CVE-2026-19411 is a NULL pointer dereference vulnerability in the shim application's dp.c library used by the UEFI bootloader on Red Hat Enterprise Linux 7. This flaw can cause system instability or denial of service by crashing the process that handles the bootloader. The vulnerability requires local access with high privileges and does not involve user interaction. Red Hat rates the impact as moderate, with potential effects on system availability and integrity. No official patch or fix status is confirmed in the advisory, but mitigation can be applied by adding NULL pointer checks in the code.
CVSS v3.1
Score 3.9low
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves a NULL pointer dereference in the shim application's dp.c library, specifically in the function is_removable_media_path() when DevicePathToStr() returns NULL. The missing NULL pointer checks can cause the process to crash, leading to denial of service on systems using the shim UEFI bootloader. The vulnerability requires local access with high privileges and has a CVSS v3.1 base score of 3.9 (low severity). Red Hat classifies the impact as moderate due to possible system instability, local denial of service, or corruption of system integrity and availability. The vendor advisory suggests code modifications to include NULL pointer checks as mitigation but does not confirm an official patch or fix release yet.
Potential Impact
The vulnerability can cause denial of service by crashing the shim process during UEFI boot, potentially making the system unstable or unavailable. It requires local access with high privileges and does not affect confidentiality. Integrity impact is low, and no remote exploitation or user interaction is needed. There are no known exploits in the wild. The flaw may also corrupt system integrity and availability in some cases.
Mitigation Recommendations
Red Hat advises modifying the code to include NULL pointer checks in the affected functions to prevent the NULL pointer dereference. Specific code changes include checks before calling DevicePathToStr and verifying pointers before use. No official patch or fix is currently confirmed; users should monitor the Red Hat advisory for updates. Until a fix is released, applying the suggested code-level mitigations can reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-08-10T09:33:00.303Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-19411","vendor":"Red Hat"}]
Threat ID: 6a7a3b18bf8831d539856756
Added to database: 08/10/2026, 20:56:56 UTC
Last enriched: 08/10/2026, 21:13:03 UTC
Last updated: 08/11/2026, 02:47:31 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.