Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

CVE-2026-19411: NULL Pointer Dereference in Red Hat Red Hat Enterprise Linux 7

0
Low
VulnerabilityCVE-2026-19411cvecve-2026-19411
Published: 08/10/2026 (08/10/2026, 20:45:52 UTC)
Source: CVE Database V5
Vendor/Project: Red Hat
Product: Red Hat Enterprise Linux 7

Description

CVE-2026-19411 is a NULL pointer dereference vulnerability in the shim application's dp.c library used by the UEFI bootloader on Red Hat Enterprise Linux 7. This flaw can cause system instability or denial of service by crashing the process that handles the bootloader. The vulnerability requires local access with high privileges and does not involve user interaction. Red Hat rates the impact as moderate, with potential effects on system availability and integrity. No official patch or fix status is confirmed in the advisory, but mitigation can be applied by adding NULL pointer checks in the code.

CVSS v3.1

Score 3.9low

Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
Low
Availability
Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/10/2026, 21:13:03 UTC

Technical Analysis

This vulnerability involves a NULL pointer dereference in the shim application's dp.c library, specifically in the function is_removable_media_path() when DevicePathToStr() returns NULL. The missing NULL pointer checks can cause the process to crash, leading to denial of service on systems using the shim UEFI bootloader. The vulnerability requires local access with high privileges and has a CVSS v3.1 base score of 3.9 (low severity). Red Hat classifies the impact as moderate due to possible system instability, local denial of service, or corruption of system integrity and availability. The vendor advisory suggests code modifications to include NULL pointer checks as mitigation but does not confirm an official patch or fix release yet.

Potential Impact

The vulnerability can cause denial of service by crashing the shim process during UEFI boot, potentially making the system unstable or unavailable. It requires local access with high privileges and does not affect confidentiality. Integrity impact is low, and no remote exploitation or user interaction is needed. There are no known exploits in the wild. The flaw may also corrupt system integrity and availability in some cases.

Mitigation Recommendations

Red Hat advises modifying the code to include NULL pointer checks in the affected functions to prevent the NULL pointer dereference. Specific code changes include checks before calling DevicePathToStr and verifying pointers before use. No official patch or fix is currently confirmed; users should monitor the Red Hat advisory for updates. Until a fix is released, applying the suggested code-level mitigations can reduce risk.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Data Version
5.2
Assigner Short Name
redhat
Date Reserved
2026-08-10T09:33:00.303Z
Cvss Version
3.1
State
PUBLISHED
Remediation Level
null
Vendor Advisory Urls
[{"url":"https://access.redhat.com/security/cve/CVE-2026-19411","vendor":"Red Hat"}]

Threat ID: 6a7a3b18bf8831d539856756

Added to database: 08/10/2026, 20:56:56 UTC

Last enriched: 08/10/2026, 21:13:03 UTC

Last updated: 08/11/2026, 02:47:31 UTC

Views: 8

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses