PT-2019-6076 · Linux · Linux Kernel
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.2
Description
The issue is related to the use of memory after it has been freed in the block subsystem of the Linux kernel, specifically involving the
blk mq free rqs and blk cleanup queue functions. This can potentially allow an attacker to access confidential data, compromise data integrity, and cause a denial of service. Additionally, it may lead to arbitrary code execution in the kernel context and privilege escalation.Recommendations
For Linux kernel versions prior to 5.2, update to version 5.2 or later to resolve the issue.
At the moment, there is no information about additional mitigation measures for this specific vulnerability.
Exploit
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel