CVE-2019-10125
kernel: use-after-free in aio_poll() in fs/aio.c
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Photon OS. Daha düşük diyenler: Red Hat (yüksek).
Açıklama
An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 3.0 | linux, linux-aws, linux-esx ve 1 tane daha | 4.19.32-3.ph3 ve 1 tane daha |
| debian 11 | linux | 4.19.37-1 |
| debian 12 | linux | 4.19.37-1 |
| debian 13 | linux | 4.19.37-1 |
| debian 14 | linux | 4.19.37-1 |
| echo | linux | 4.19.37-1 |
| root.io debian 11 | rootio-linux | 4.19.37-1 |
| root.io debian 12 | rootio-linux | 4.19.37-1 |
| root.io debian 13 | rootio-linux | 4.19.37-1 |
9 kaynaktaki 12 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 3.0 | linux | 4.19.32-3.ph3 |
| Photon OS 3.0 | linux-aws | 4.19.32-2.ph3 |
| Photon OS 3.0 | linux-esx | 4.19.32-2.ph3 |
| Photon OS 3.0 | linux-secure | 4.19.32-2.ph3 |
| debian 11 | linux | 4.19.37-1 |
| debian 12 | linux | 4.19.37-1 |
| debian 13 | linux | 4.19.37-1 |
| debian 14 | linux | 4.19.37-1 |
| echo | linux | 4.19.37-1 |
| root.io debian 11 | rootio-linux | 4.19.37-1 |
| root.io debian 12 | rootio-linux | 4.19.37-1 |
| root.io debian 13 | rootio-linux | 4.19.37-1 |
Referanslar
- http://www.securityfocus.com/bid/107655
- https://access.redhat.com/security/cve/CVE-2019-10125
- https://nvd.nist.gov/vuln/detail/CVE-2019-10125
- https://patchwork.kernel.org/patch/10828359/
- https://security.netapp.com/advisory/ntap-20190411-0003/
- https://support.f5.com/csp/article/K29215970
- https://www.cve.org/CVERecord?id=CVE-2019-10125