{"id":"CVE-2026-19411","title":"Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null","summary":"A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader.","severity":"low","cvss":3.9,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cvssSource":"cna","cwe":["CWE-476"],"vendor":"Red Hat","product":"shim-signed","affected":["shim-signed (all versions)","shim-unsigned-aarch64 (all versions)","shim-unsigned-aarch64 (all versions)"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-08-11T13:28:50.750565Z"},"published":"2026-08-10","updated":"2026-11-06","sourceUpdated":"2026-11-06T18:09:10.248Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-19411","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-19411"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513060","label":"RHBZ#2513060"}],"tags":["cve.org"],"epss":0.00133,"epssPercentile":0.02868,"ingestedAt":"2026-11-06T19:01:36.639Z","slug":"CVE-2026-19411","body":"## Overview\n\nA NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader.\n\n## Affected\n\n- `shim-signed (all versions)`\n- `shim-unsigned-aarch64 (all versions)`\n- `shim-unsigned-aarch64 (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nThe code could be modified to include NULL pointer checkers in the code. \nBefore DevicePathToStr : \"if (li == NULL || li->FilePath == NULL) return 0;\"\nAfter DevicePathToStr : \"if (bootpath == NULL) return 0;\"\nAt error: \"if (bootpath != NULL)\"","depth":"sunlit","depthScore":21,"depthScoreParts":{"impact":21.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}