NetSight
IP …
high7.8

CVE-2019-8912

In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-afte…

Impact

In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.10 before 4.14.103
from 4.19 before 4.19.25
from 4.20 before 4.20.12
Version 5.0
RedhatEnterprise Linux
Version 7.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10
OpensuseLeap
Version 15.0

Weakness classification

CWE-416

References