PT-2019-3111 · Linux+5 · Linux Kernel+5

Syzbot · Published 2019-04-16 · Updated 2021-05-28 · CVE-2019-15214

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0.10

Description The issue is related to a use-after-free in the sound subsystem of the Linux kernel. This occurs because card disconnection causes certain data structures to be deleted too early, which is associated with the sound/core/init.c and sound/core/info.c components. Exploitation of this issue may allow an attacker to cause a denial of service.

Recommendations For Linux kernel versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the sound subsystem to minimize the risk of exploitation.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2019-1762

ALT-PU-2019-1767

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

BDU:2019-03094

CESA-2019_3517

CESA-2020_1016

CVE-2019-15214

DLA-1884-1

OPENSUSE-SU-2019:2173-1

OPENSUSE-SU-2019:2181-1

OPENSUSE-SU-2019_2173-1

OPENSUSE-SU-2019_2181-1

RHSA-2019:3517

RHSA-2019_3517

RHSA-2020:1016

RHSA-2020_1016

SUSE-SU-2019:2412-1

SUSE-SU-2019:2414-1

SUSE-SU-2019:2424-1

SUSE-SU-2019:2648-1

SUSE-SU-2019:2651-1

SUSE-SU-2019:2658-1

SUSE-SU-2019:2738-1

SUSE-SU-2019:2756-1

SUSE-SU-2019:2949-1

SUSE-SU-2019:2984-1

USN-4115-1

USN-4115-2

USN-4118-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 703

• 🔥 https://syzkaller.appspot.com/bug?id=75903e0021cef79bc434d068b5169b599b2a46a9 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2019:2181-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-11085 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html · Vendor Advisory
• https://usn.ubuntu.com/4115-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4115-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3900 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2a3f7221acddfe1caa9ff09b3a8158c39b2fdeac · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-10126 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15214 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2173-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-11884 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13099 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4118-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2414-1 · Vendor Advisory