UBUNTU-CVE-2026-19411

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-19411
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-19411
Upstream
  • CVE-2026-19411
Published
2026-08-13T00:00:00Z
Modified
2026-08-13T19:30:08.326832742Z
Severity
  • 3.9 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader.

References

Affected packages

Ubuntu:14.04:LTS
secureboot-db

Package

Name
secureboot-db
Purl
pkg:deb/ubuntu/secureboot-db?arch=source&distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.1
1.4~ubuntu0.14.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.4~ubuntu0.14.04.1",
            "binary_name": "secureboot-db"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim

Package

Name
shim
Purl
pkg:deb/ubuntu/shim?arch=source&distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.4-0ubuntu4
0.8-0ubuntu2
0.9+1474479173.6c180c6-1ubuntu1
Other
13-0ubuntu2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "13-0ubuntu2",
            "binary_name": "shim"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim-signed

Package

Name
shim-signed
Purl
pkg:deb/ubuntu/shim-signed?arch=source&distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.3
1.4
1.5
1.6
1.9
1.17~14.04.1
1.18~14.04.1
1.19~14.04.1
1.32~14.04.2
1.33.1~14.04.2
1.33.1~14.04.3
1.33.1~14.04.4
1.33.1~14.04.5

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.33.1~14.04.5+13-0ubuntu2",
            "binary_name": "shim-signed"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
Ubuntu:16.04:LTS
secureboot-db

Package

Name
secureboot-db
Purl
pkg:deb/ubuntu/secureboot-db?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.1
1.4~ubuntu0.16.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.4~ubuntu0.16.04.1",
            "binary_name": "secureboot-db"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim

Package

Name
shim
Purl
pkg:deb/ubuntu/shim?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.8-0ubuntu2
0.9+1474479173.6c180c6-1ubuntu1
Other
13-0ubuntu2
15+1533136590.*
15+1533136590.3beb971-0ubuntu1
15+1552672080.*
15+1552672080.a4a1fbe-0ubuntu2
15.*
15.4-0ubuntu7

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "15.4-0ubuntu7",
            "binary_name": "shim"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim-signed

Package

Name
shim-signed
Purl
pkg:deb/ubuntu/shim-signed?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.11
1.12
1.17~16.04.1
1.18~16.04.1
1.19~16.04.1
1.27~16.04.1
1.28~16.04.1
1.32~16.04.1
1.33.1~16.04.1
1.33.1~16.04.2
1.33.1~16.04.3
1.33.1~16.04.4
1.33.1~16.04.5
1.33.1~16.04.6
1.33.1~16.04.10

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.33.1~16.04.10+15.4-0ubuntu7",
            "binary_name": "shim-signed"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
Ubuntu:18.04:LTS
secureboot-db

Package

Name
secureboot-db
Purl
pkg:deb/ubuntu/secureboot-db?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.1
1.4~ubuntu0.18.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.4~ubuntu0.18.04.1",
            "binary_name": "secureboot-db"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim

Package

Name
shim
Purl
pkg:deb/ubuntu/shim?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.9+1474479173.6c180c6-1ubuntu1
Other
13-0ubuntu2
15+1533136590.*
15+1533136590.3beb971-0ubuntu1
15+1552672080.*
15+1552672080.a4a1fbe-0ubuntu2
15.*
15.4-0ubuntu7
15.4-0ubuntu9
15.7-0ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "15.7-0ubuntu1",
            "binary_name": "shim"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim-signed

Package

Name
shim-signed
Purl
pkg:deb/ubuntu/shim-signed?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.32
1.33.1
1.34.4
1.34.5
1.34.6
1.34.7
1.34.8
1.34.9
1.34.9.1
1.34.9.2
1.37~18.04.1
1.37~18.04.2
1.37~18.04.3
1.37~18.04.6
1.37~18.04.8
1.37~18.04.10
1.37~18.04.11
1.37~18.04.13

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.37~18.04.13+15.7-0ubuntu1",
            "binary_name": "shim-signed"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
Ubuntu:20.04:LTS
secureboot-db

Package

Name
secureboot-db
Purl
pkg:deb/ubuntu/secureboot-db?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.5
1.6~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.6~20.04.1",
            "binary_name": "secureboot-db"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim

Package

Name
shim
Purl
pkg:deb/ubuntu/shim?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

15+1533136590.*
15+1533136590.3beb971-0ubuntu1
15+1552672080.*
15+1552672080.a4a1fbe-0ubuntu1
15+1552672080.a4a1fbe-0ubuntu2
15.*
15.4-0ubuntu7
15.4-0ubuntu9
15.7-0ubuntu1
15.8-0ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "15.8-0ubuntu1",
            "binary_name": "shim"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim-signed

Package

Name
shim-signed
Purl
pkg:deb/ubuntu/shim-signed?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.39
1.40
1.40.3
1.40.4
1.40.6
1.40.7
1.40.9
1.40.10
1.41

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.41+15+1552672080.a4a1fbe-0ubuntu1",
            "binary_name": "shim-signed"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
Ubuntu:22.04:LTS
secureboot-db

Package

Name
secureboot-db
Purl
pkg:deb/ubuntu/secureboot-db?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.8

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.8",
            "binary_name": "secureboot-db"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim

Package

Name
shim
Purl
pkg:deb/ubuntu/shim?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

15.*
15.4-0ubuntu9
15.7-0ubuntu1
15.8-0ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "15.8-0ubuntu1",
            "binary_name": "shim"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim-signed

Package

Name
shim-signed
Purl
pkg:deb/ubuntu/shim-signed?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.51
1.51.3
1.51.4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.51.4+15.8-0ubuntu1",
            "binary_name": "shim-signed"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
Ubuntu:24.04:LTS
secureboot-db

Package

Name
secureboot-db
Purl
pkg:deb/ubuntu/secureboot-db?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.8
1.9
1.9build1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.9build1",
            "binary_name": "secureboot-db"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim

Package

Name
shim
Purl
pkg:deb/ubuntu/shim?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

15.*
15.7-0ubuntu1
15.8-0ubuntu1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "15.8-0ubuntu1",
            "binary_name": "shim"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim-signed

Package

Name
shim-signed
Purl
pkg:deb/ubuntu/shim-signed?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.56
1.57
1.58

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.58+15.8-0ubuntu1",
            "binary_name": "shim-signed"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
Ubuntu:26.04:LTS
secureboot-db

Package

Name
secureboot-db
Purl
pkg:deb/ubuntu/secureboot-db?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.9build1
1.9build2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.9build2",
            "binary_name": "secureboot-db"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim

Package

Name
shim
Purl
pkg:deb/ubuntu/shim?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

15.*
15.8-0ubuntu2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "15.8-0ubuntu2",
            "binary_name": "shim"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"
shim-signed

Package

Name
shim-signed
Purl
pkg:deb/ubuntu/shim-signed?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.59

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.59+15.8-0ubuntu2",
            "binary_name": "shim-signed"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-19411.json"