NetSight
IP …
high8.1

CVE-2019-11815

An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8.

Impact

An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.3 before 4.4.179
from 4.9 before 4.9.169
from 4.14 before 4.14.112
from 4.19 before 4.19.35
from 5.0 before 5.0.8
Version 5.1
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.04
DebianDebian Linux
Versions 8.0, 9.0
OpensuseLeap
Versions 15.0, 15.1, 42.3
NetappActive Iq Unified Manager
from 9.5
NetappHci Management Node
All versions
NetappSnapprotect
All versions
NetappSolidfire
All versions
NetappStorage Replication Adapter
Version 7.2
NetappVasa Provider For Clustered Data Ontap
from 7.2
NetappVirtual Storage Console
from 7.2
NetappHci Compute Node
All versions

Weakness classification

CWE-362CWE-416

References