imPC@ndo IT

Tracker / CVE-2019-11815

CVE-2019-11815

High 8.1

An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.

Affected products and versions

canonical ubuntu_linux
debian debian_linux
linux linux_kernel
linux linux_kernel · 4.14 → 4.14.112
linux linux_kernel · 4.19 → 4.19.35
linux linux_kernel · 4.3 → 4.4.179
linux linux_kernel · 4.9 → 4.9.169
linux linux_kernel · 5.0 → 5.0.8
netapp active_iq_unified_manager · 9.5 → …
netapp cn1610_firmware
netapp hci_compute_node
netapp hci_management_node
netapp hci_storage_node
netapp snapprotect
netapp solidfire
netapp storage_replication_adapter
netapp vasa_provider_for_clustered_data_ontap · 7.2 → …
netapp virtual_storage_console · 7.2 → …
opensuse leap

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References