PT-2019-5423 · Linux+5 · Linux Kernel+5

Yue Haibing · Published 2019-03-19 · Updated 2023-01-20 · CVE-2019-20811

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0.6

Description An issue in the Linux kernel's network subsystem is related to errors in pointer counting in the functions rx queue add kobject() and netdev queue add kobject() in net/core/net-sysfs.c. This issue can allow an attacker to impact data integrity.

Recommendations For Linux kernel versions prior to 5.0.6, update to version 5.0.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable functions rx queue add kobject() and netdev queue add kobject() until a patch is available.

Fix

Weakness Enumeration

CWE-460

Related Identifiers

ALT-PU-2019-1584

ALT-PU-2019-1710

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

BDU:2020-03025

CESA-2019_3517

CESA-2020_5023

CVE-2019-20811

DLA-2242-1

DSA-4698-1

OPENSUSE-SU-2022_2111-1

RHSA-2019:3517

RHSA-2019_3517

RHSA-2020:5023

RHSA-2020:5026

RHSA-2020_5023

RHSA-2020_5026

SUSE-SU-2022:1651-1

SUSE-SU-2022:1668-1

SUSE-SU-2022:1686-1

SUSE-SU-2022:2083-1

SUSE-SU-2022:2103-1

SUSE-SU-2022:2111-1

SUSE-SU-2022_1651-1

SUSE-SU-2022_1686-1

USN-4527-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 138

• https://nvd.nist.gov/vuln/detail/CVE-2019-20811 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:1651-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-20811 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-9445 · Vendor Advisory
• https://usn.ubuntu.com/4527-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-20811 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19073 · Vendor Advisory
• https://debian.org/security/2020/dsa-4698 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9e · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4527-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-20811 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1668-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-9453 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19074 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-20811 · Security Note