CVE-2019-9003 In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a...
HighCVSS 7.5
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.19.20-1 | 4.19.20-1 |
| debian/linux(Debian:13) | < 4.19.20-1 | 4.19.20-1 |
| debian/linux(Debian:14) | < 4.19.20-1 | 4.19.20-1 |
| Linux kernel | >= 4.18, < 4.19.18 | 4.19.18 |
| Linux kernel | >= 4.20, < 4.20.5 | 4.20.5 |
| Linux kernel | = 5.0-rc1 | No fix listed |
| Linux kernel | = 5.0-rc2 | No fix listed |
| Linux kernel | = 5.0-rc3 | No fix listed |
| Linux kernel | = 5.0-rc4 | No fix listed |
| netapp hci management node | All versions | No fix listed |
| netapp snapprotect | All versions | No fix listed |
| netapp solidfire | All versions | No fix listed |
| netapp cn1610 firmware | All versions | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.10 | No fix listed |
| openSUSE leap | = 15.0 | No fix listed |
References
- Debian Security Tracker CVE-2019-9003 vendor-advisory
- git.kernel.org patch vendor-advisory
- openSUSE-SU-2019:1404 mailing-list third-party-advisory vendor-advisory
- 107145 third-party-advisory vdb-entry
- cdn.kernel.org release-notes vendor-advisory
- github.com patch third-party-advisory
- security.netapp.com third-party-advisory
- USN-3930-1 third-party-advisory vendor-advisory
- USN-3930-2 third-party-advisory vendor-advisory