CVE-2019-8912

Опубликовано: 18 фев. 2019

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS2: 7.2

CVSS3: 7.8

Описание

In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.

Релиз	Статус	Примечание
bionic	released	4.15.0-47.50
cosmic	released	4.18.0-17.18
devel	not-affected	5.0.0-13.14
disco	not-affected	5.0.0-7.8
esm-infra-legacy/trusty	not-affected	3.11.0-12.19
esm-infra/bionic	released	4.15.0-47.50
esm-infra/xenial	not-affected	4.2.0-16.19
precise/esm	not-affected	3.0.0-12.20
trusty	not-affected	3.11.0-12.19
trusty/esm	not-affected	3.11.0-12.19

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1035.37
cosmic	released	4.18.0-1012.14
devel	not-affected	5.0.0-1004.4
disco	not-affected	5.0.0-1001.1
esm-infra-legacy/trusty	not-affected	4.4.0-1002.2
esm-infra/bionic	released	4.15.0-1035.37
esm-infra/xenial	not-affected	4.4.0-1001.10
precise/esm	DNE
trusty	not-affected	4.4.0-1002.2
trusty/esm	not-affected	4.4.0-1002.2

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE
esm-infra/xenial	released	4.15.0-1035.37~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	5.0

Показывать по

Релиз	Статус	Примечание
bionic	released	4.18.0-1014.14~18.04.1
cosmic	released	4.18.0-1014.14
devel	not-affected	5.0.0-1004.4
disco	not-affected	5.0.0-1001.1
esm-infra-legacy/trusty	released	4.15.0-1041.45~14.04.1
esm-infra/bionic	released	4.18.0-1014.14~18.04.1
esm-infra/xenial	released	4.15.0-1041.45
precise/esm	DNE
trusty	released	4.15.0-1041.45~14.04.1
trusty/esm	released	4.15.0-1041.45~14.04.1

Показывать по

Релиз	Статус	Примечание
bionic	released	4.18.0-1014.14~18.04.1
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	released	4.18.0-1014.14~18.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	5.0

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	5.0

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	5.0

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1029.31
cosmic	released	4.18.0-1008.9
devel	not-affected	5.0.0-1004.4
disco	not-affected	5.0.0-1001.1
esm-infra-legacy/trusty	DNE
esm-infra/bionic	released	4.15.0-1029.31
esm-infra/xenial	released	4.15.0-1029.31~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	released	4.18.0-1008.9~18.04.1
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	released	4.18.0-1008.9~18.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	5.0

Показывать по

Релиз	Статус	Примечание
bionic	not-affected
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	5.0
xenial	ignored	end of standard support

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	5.0

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	5.0
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	released	4.18.0-17.18~18.04.1
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	released	4.18.0-17.18~18.04.1
esm-infra/xenial	released	4.15.0-47.50~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	5.0.0-15.16~18.04.1
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	5.0.0-15.16~18.04.1
esm-infra/xenial	released	4.15.0-47.50~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1031.31
cosmic	released	4.18.0-1009.9
devel	not-affected	5.0.0-1004.4
disco	not-affected	5.0.0-1001.1
esm-infra-legacy/trusty	DNE
esm-infra/bionic	released	4.15.0-1031.31
esm-infra/xenial	not-affected	4.4.0-1004.9
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE
precise/esm	not-affected	3.13.0-24.46~precise1
trusty	DNE
trusty/esm	DNE
upstream	released	5.0
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was ignored [end of life, was ignored]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	ignored	end of life, was ignored
upstream	released	5.0
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was ignored [end of life, was ignored]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	ignored	end of life, was ignored
upstream	released	5.0
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was ignored [end of life, was ignored]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	ignored	end of life, was ignored
upstream	released	5.0
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	not-affected	4.4.0-13.29~14.04.1
precise/esm	DNE
trusty	not-affected	4.4.0-13.29~14.04.1
trusty/esm	not-affected	4.4.0-13.29~14.04.1
upstream	released	5.0
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	5.0
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-apps/xenial	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	5.0

Показывать по

Релиз	Статус	Примечание
bionic	DNE
cosmic	DNE
devel	DNE
disco	DNE
esm-infra-legacy/trusty	DNE	trusty/esm was DNE [trusty was ignored [abandoned]]
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	DNE	trusty was ignored [abandoned]
upstream	released	5.0
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1035.40
cosmic	released	4.15.0-1035.40
devel	not-affected	4.15.0-1035.40
disco	not-affected	4.15.0-1035.40
esm-infra-legacy/trusty	DNE
esm-infra/bionic	released	4.15.0-1035.40
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	5.0

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1010.12
cosmic	released	4.15.0-1010.12
devel	not-affected	4.15.0-1011.13
disco	not-affected	4.15.0-1010.12
esm-infra-legacy/trusty	DNE
esm-infra/bionic	released	4.15.0-1010.12
esm-infra/xenial	released	4.15.0-1010.12~16.04.1
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	released	4.15.0-1033.35
cosmic	released	4.18.0-1011.13
devel	not-affected	5.0.0-1006.6
disco	not-affected	5.0.0-1004.4
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	5.0
xenial	not-affected	4.2.0-1013.19

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	4.4.0-1077.82
cosmic	DNE
devel	not-affected	5.0.0-1010.10
disco	not-affected	5.0.0-1010.10
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	released	5.0
xenial	not-affected	4.4.0-1012.12

Показывать по

Ссылки на источники

EPSS

Процентиль: 57%

0.00357

Низкий

7.2 High

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVE-2019-8912

CVSS3: 7.8

redhat

почти 7 лет назад

In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.

CVE-2019-8912

CVSS3: 7.8

nvd

почти 7 лет назад

In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.

CVE-2019-8912

CVSS3: 7.8

debian

почти 7 лет назад

In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg ...

GHSA-4wpv-r6m6-xjq5

CVSS3: 7.8

github

больше 3 лет назад

In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.

BDU:2019-02363

CVSS3: 7.8

fstec

почти 7 лет назад

Уязвимость функции af_alg_release ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код в режиме ядра

EPSS

Процентиль: 57%

0.00357

Низкий

7.2 High

CVSS2

7.8 High

CVSS3

CVE-2019-8912

Описание

Пакет linux

Пакет linux-aws

Пакет linux-aws-hwe

Пакет linux-azure

Пакет linux-azure-edge

Пакет linux-euclid

Пакет linux-flo

Пакет linux-gcp

Пакет linux-gcp-edge

Пакет linux-gke

Пакет linux-goldfish

Пакет linux-grouper

Пакет linux-hwe

Пакет linux-hwe-edge

Пакет linux-kvm

Пакет linux-lts-trusty

Пакет linux-lts-utopic

Пакет linux-lts-vivid

Пакет linux-lts-wily

Пакет linux-lts-xenial

Пакет linux-maguro

Пакет linux-mako

Пакет linux-manta

Пакет linux-oem

Пакет linux-oracle

Пакет linux-raspi2

Пакет linux-snapdragon

Ссылки на источники

Связанные уязвимости