CVEvulnerability
CVE-2019-3896
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-06-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-415, CWE-416
Description
A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).
Affected configurations
• linux linux kernel (>= 2.6.0 <= 2.6.39.4)
• redhat enterprise linux desktop 6.0
• redhat enterprise linux server 6.0
• redhat enterprise linux server aus 6.5
• redhat enterprise linux server aus 6.6
• redhat enterprise linux workstation 6.0
Related
References
- http://www.securityfocus.com/bid/108814 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3896 Issue Tracking, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190710-0002/ security.netapp.com
- https://support.f5.com/csp/article/K04327111 support.f5.com
- http://www.securityfocus.com/bid/108814 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3896 Issue Tracking, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190710-0002/ security.netapp.com
- https://support.f5.com/csp/article/K04327111 support.f5.com