PT-2019-5423 · Linux+5 · Linux Kernel+5
Yue Haibing
·
Publicado
2019-03-19
·
Atualizado
2023-01-20
·
CVE-2019-20811
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.0.6
Description
An issue in the Linux kernel's network subsystem is related to errors in pointer counting in the functions
rx queue add kobject() and netdev queue add kobject() in net/core/net-sysfs.c. This issue can allow an attacker to impact data integrity.Recommendations
For Linux kernel versions prior to 5.0.6, update to version 5.0.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable functions
rx queue add kobject() and netdev queue add kobject() until a patch is available.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu