CVE-2019-19807 PUBLISHED

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to snd_timer_open and snd_timer_close_locked. The timeri variable was originally intended to be for a newly created timer instance, but was used for a different purpose after refactoring.

EPSS 0.08% · 23.2th percentile

Risk Scores

EPSS Score
0.08%
23.2th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1080.83+cvm1.1, 5.4.0-1095.101+cvm1.1, 5.4.0-1098.104+cvm1.1
Ubuntu:18.04:LTSlinux-snapdragon4.15.0-1066.73, 4.15.0-1065.72, 4.15.0-1064.71
Ubuntu:Pro:14.04:LTSlinux-azure4.15.0-1035.36~14.04.2, 4.15.0-1032.33~14.04.2, 4.15.0-1036.38~14.04.2
Ubuntu:20.04:LTSlinux-gkeop-5.155.15.0-1019.24~20.04.1, 5.15.0-1017.22~20.04.1, 5.15.0-1022.27~20.04.1
Ubuntu:16.04:LTSlinux-aws-hwe0, 4.15.0-1030.31~16.04.1, 4.15.0-1031.33~16.04.1
Ubuntu:16.04:LTSlinux-gcp4.13.0-1008.11, 0, 4.10.0-1004.4
Ubuntu:18.04:LTSlinux-oem4.15.0-1013.16, 0, 4.15.0-1015.18
Ubuntu:18.04:LTSlinux-kvm4.15.0-1023.23, 4.15.0-1050.50, 0
Ubuntu:20.04:LTSlinux-raspi25.3.0-1015.17, 5.3.0-1014.16, 5.3.0-1007.8
Ubuntu:18.04:LTSlinux-hwe-edge5.3.0-23.25~18.04.1, 5.3.0-23.25~18.04.2, 5.3.0-24.26~18.04.2
Ubuntu:24.04:LTSlinux-raspi-realtime0, 6.8.0-2019.20
Ubuntu:18.04:LTSlinux-gke-4.154.15.0-1041.43, 4.15.0-1040.42, 4.15.0-1037.39
Ubuntu:16.04:LTSlinux-azure4.15.0-1064.69, 0, 4.11.0-1009.9
Ubuntu:18.04:LTSlinux4.15.0-36.39, 4.15.0-72.81, 4.15.0-70.79
Ubuntu:18.04:LTSlinux-oracle4.15.0-1009.11, 4.15.0-1015.17, 4.15.0-1014.16
Ubuntu:18.04:LTSlinux-azure-edge4.18.0-1008.8~18.04.1, 4.18.0-1007.7~18.04.1, 4.18.0-1006.6~18.04.1
Ubuntu:20.04:LTSlinux-gke5.4.0-1083.89, 5.4.0-1105.112, 5.4.0-1104.111
Ubuntu:16.04:LTSlinux-hwe-edge4.10.0-24.28~16.04.1, 4.8.0-32.34~16.04.1, 4.8.0-34.36~16.04.1
Ubuntu:18.04:LTSlinux-aws4.15.0-1045.47, 4.15.0-1044.46, 4.15.0-1043.45
Ubuntu:22.04:LTSlinux-intel-iot-realtime0, 5.15.0-1073.75

…and 10 more

Timeline

References

Open in Interactive Console →