CVE-2019-19769: Use After Free
In lockswakeupblocks of locks.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Other sources
In the Linux kernel 5.3.10, there is a use-after-free (read) in the perftracelockacquire function (related to include/trace/events/lock.h).
— Ubuntu
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Upgrade
Upgrade
android/:linux_kernel:to a version that resolves this vulnerability.Fixed in :2020-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19769?
CVE-2019-19769 has a medium severity rating due to the potential for exploitation of a use-after-free vulnerability.
How do I fix CVE-2019-19769?
To fix CVE-2019-19769, update the Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.
Which versions of the Linux kernel are affected by CVE-2019-19769?
CVE-2019-19769 affects Linux kernel versions up to and including 5.3.10.
Is CVE-2019-19769 exploitable on all Linux distributions?
CVE-2019-19769 is specifically a concern for users running affected versions of the Linux kernel on distributions like Fedora and Debian.
What impact does CVE-2019-19769 have on system security?
CVE-2019-19769 could allow an attacker to potentially read sensitive memory content, compromising system confidentiality.