CVE-2019-3896: Use After Free
A double-free can happen in idrremoveall() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).
Other sources
A double-free can happen in idrremoveall() in lib/idr.c in the Linux kernel. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2019-3896?
CVE-2019-3896 is a vulnerability in the Linux kernel that allows an unprivileged local attacker to escalate privileges or cause a denial of service.
How does CVE-2019-3896 affect Linux kernel 2.6?
CVE-2019-3896 affects the Linux kernel 2.6 branch, specifically versions 2.6.32-754.15.3.el6, 2.6.32-431.95.3.el6, and 2.6.32-504.79.3.el6.
What is the severity of CVE-2019-3896?
CVE-2019-3896 has a severity rating of high.
How can an attacker exploit CVE-2019-3896?
An attacker can exploit CVE-2019-3896 by using a double-free vulnerability in idr_remove_all() in lib/idr.c to escalate privileges or cause a system crash and denial of service (DoS).
Are there any patches or fixes available for CVE-2019-3896?
Yes, patches for CVE-2019-3896 are available. It is recommended to update to the latest version of the Linux kernel to fix this vulnerability.