PT-2019-4662 · Linux+4 · Linux Kernel+4

Tristan Madani · Published 2019-11-06 · Updated 2023-01-17 · CVE-2019-19807

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.11

Description The issue is related to a use-after-free error in the Linux kernel, specifically in the sound/core/timer.c file. This error is caused by erroneous code refactoring and is associated with the snd timer open and snd timer close locked functions. The timeri variable was originally intended for a newly created timer instance but was used for a different purpose after refactoring. Exploitation of this issue may allow an attacker to elevate their privileges.

Recommendations For Linux kernel versions prior to 5.3.11, update to version 5.3.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the snd timer open and snd timer close locked functions until a patch is available.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2019-3131

ALT-PU-2019-3155

ALT-PU-2019-3184

ALT-PU-2020-1421

ALT-PU-2020-1450

ALT-PU-2020-1714

BDU:2020-00854

CESA-2020_3010

CESA-2020_3016

CESA-2020_4060

CVE-2019-19807

RHSA-2020:3010

RHSA-2020:3016

RHSA-2020:3222

RHSA-2020:4060

RHSA-2020:4062

RHSA-2020_3010

RHSA-2020_3016

RHSA-2020_4060

RHSA-2020_4062

USN-4225-1

USN-4227-1

USN-4227-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Ubuntu

References · 52

• 🔥 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e7af6307a8a54f0b873960b32b6a644f2d0fbd97 · Exploit
• https://github.com/torvalds/linux/commit/e7af6307a8a54f0b873960b32b6a644f2d0fbd97 · Patch
• https://ubuntu.com/security/CVE-2019-19072 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4225-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4227-1 · Vendor Advisory
• https://usn.ubuntu.com/4225-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-18660 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19529 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19524 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-19807 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-16233 · Vendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19047 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4227-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4227-1 · Vendor Advisory