What is CVE-2026-19411?

CVE-2026-19411 is a low-severity vulnerability in Red Hat Enterprise Linux 7, classified under NULL Pointer Dereference. CVSS score: 3.9/10. Published 2026-08-10.

How severe is CVE-2026-19411?

Low severity. CVSS v3 base score is 3.9 out of 10.

NULL pointer dereference in Red Hat Enterprise Linux 7

CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader.

CVSS v3 metric

CVSS v3 base score 3.9 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L.

Affected products

Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

References

secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
secalert@redhat.com (x_refsource_REDHAT, issue-tracking)

Frequently asked questions

What is CVE-2026-19411?: CVE-2026-19411 is a low-severity vulnerability in Red Hat Enterprise Linux 7, classified under NULL Pointer Dereference. CVSS score: 3.9/10. Published 2026-08-10.
How severe is CVE-2026-19411?: Low severity. CVSS v3 base score is 3.9 out of 10.