CVE-2019-25044: Use After Free
The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related to blkmqfreerqs and blkcleanupqueue.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-25044?
CVE-2019-25044 is a vulnerability in the block subsystem of the Linux kernel that can lead to arbitrary code execution and privilege escalation.
How severe is CVE-2019-25044?
CVE-2019-25044 has a severity rating of 7.8 out of 10.
Which software is affected by CVE-2019-25044?
The Linux kernel before version 5.2, Netapp Cloud Backup, Netapp Solidfire & Hci Management Node, and Netapp Solidfire Baseboard Management Controller Firmware are affected by CVE-2019-25044.
How can CVE-2019-25044 be fixed?
To fix CVE-2019-25044, update to a version of the Linux kernel after 5.2 or apply the necessary patches provided by the software vendor.
Where can I find more information about CVE-2019-25044?
You can find more information about CVE-2019-25044 in the references provided: [Link 1](https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2), [Link 2](https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c3e2219216c92919a6bd1711f340f5faa98695e6), [Link 3](https://security.netapp.com/advisory/ntap-20210629-0006/).