NetSight
IP …
high7.8

CVE-2019-11487

The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists.

Impact

The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.216
from 4.5 before 4.9.181
from 4.10 before 4.14.116
from 4.15 before 4.19.39
from 4.20 before 5.0.12
Version 5.1
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.04

Weakness classification

CWE-416

References