CVE-2019-25045: Use After Free
An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrmstatefini panic, aka CID-dbb2483b2a46.
Other sources
In xfrmstatefini and related functions of xfrmstate.c and related files, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:to a version that resolves this vulnerability.Fixed in :2021-10-05
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25045?
The severity of CVE-2019-25045 is high with a severity value of 7.8.
What is CVE-2019-25045?
CVE-2019-25045 is an issue discovered in the Linux kernel before 5.0.19 related to a use-after-free vulnerability in the XFRM subsystem.
Which software is affected by CVE-2019-25045?
The Linux kernel before version 5.0.19 and Netapp Solidfire Baseboard Management Controller Firmware are affected by CVE-2019-25045.
How can I fix CVE-2019-25045?
To fix CVE-2019-25045, update your Linux kernel to version 5.0.19 or later.
Where can I find more information about CVE-2019-25045?
You can find more information about CVE-2019-25045 in the references provided: [link1], [link2], [link3].