CVE-2019-11815: Race Condition
An issue was discovered in rdstcpkillsock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 4.19.37-1Fixed in 4.9.168-1+deb9u3 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade
Linux kernel (net/rds/tcp.c)to a version that resolves this vulnerability.Fixed in 5.0.8
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11815?
CVE-2019-11815 is classified as a high severity vulnerability due to the potential for a use-after-free condition.
How do I fix CVE-2019-11815?
To fix CVE-2019-11815, update the Linux kernel to versions 5.0.8 or later, or the specific patched versions provided by your distribution.
What type of vulnerability is CVE-2019-11815?
CVE-2019-11815 is a vulnerability characterized as a race condition leading to a use-after-free in the Linux kernel.
Which systems are affected by CVE-2019-11815?
CVE-2019-11815 affects various versions of the Linux kernel before 5.0.8 and specific distributions such as Debian and Ubuntu.
What could an attacker exploit in CVE-2019-11815?
An attacker could exploit CVE-2019-11815 to execute arbitrary code or cause a denial of service due to the race condition in net namespace cleanup.