NetSight
IP …
high7.0

CVE-2019-11811

An issue was discovered in the Linux kernel before 5.0.4.

Impact

An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmi_si module is removed, related to drivers/char/ipmi/ipmi_si_intf.c, drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.18 before 4.19.31
from 4.20 before 5.0.4
OpensuseLeap
Version 15.1
RedhatEnterprise Linux
Version 7.0
RedhatEnterprise Linux Aus
Version 7.6
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Version 7.4
RedhatEnterprise Linux Server Tus
Versions 7.4, 7.6
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-416

References