CVE-2019-19769: Use After Free
In the Linux kernel 5.3.10, there is a use-after-free (read) in the perftracelockacquire function (related to include/trace/events/lock.h).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19769?
CVE-2019-19769 has a medium severity rating due to the potential for exploitation of a use-after-free vulnerability.
How do I fix CVE-2019-19769?
To fix CVE-2019-19769, update the Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.
Which versions of the Linux kernel are affected by CVE-2019-19769?
CVE-2019-19769 affects Linux kernel versions up to and including 5.3.10.
Is CVE-2019-19769 exploitable on all Linux distributions?
CVE-2019-19769 is specifically a concern for users running affected versions of the Linux kernel on distributions like Fedora and Debian.
What impact does CVE-2019-19769 have on system security?
CVE-2019-19769 could allow an attacker to potentially read sensitive memory content, compromising system confidentiality.