CVE-2019-11815

An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.

Published: May 8, 2019
Updated: Apr 13, 2023
CVE: CVE-2019-11815
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Affected Software
References

Software	From	Fixed in
linux / linux_kernel	5.1-rc2	5.1-rc2.x
linux / linux_kernel	5.1-rc3	5.1-rc3.x
linux / linux_kernel	5.1-rc4	5.1-rc4.x
linux / linux_kernel	5.1-rc1	5.1-rc1.x
linux / linux_kernel	5.0	5.0.8
linux / linux_kernel	4.9	4.9.169
linux / linux_kernel	4.14	4.14.112
linux / linux_kernel	4.19	4.19.35
linux / linux_kernel	4.3	4.4.179
canonical / ubuntu_linux	18.04	18.04.x
canonical / ubuntu_linux	19.04	19.04.x
canonical / ubuntu_linux	14.04	14.04.x
canonical / ubuntu_linux	16.04	16.04.x
debian / debian_linux	8.0	8.0.x
debian / debian_linux	9.0	9.0.x
opensuse / leap	42.3	42.3.x
opensuse / leap	15.0	15.0.x
opensuse / leap	15.1	15.1.x
netapp / virtual_storage_console	7.2	7.2.x
netapp / active_iq_unified_manager	9.5	9.5.x
netapp / vasa_provider_for_clustered_data_ontap	7.2	7.2.x
netapp / storage_replication_adapter	7.2	7.2.x

Vulnerability Database

CVE-2019-11815

Deep Security Visibility Without the Complexity