CVE-2019-9003 PUBLISHED

In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.

EPSS 6.76% · 91.2th percentile

Risk Scores

EPSS Score
6.76%
91.2th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-azure0, 4.15.0-1002.2, 4.15.0-1003.3
Ubuntu:18.04:LTSlinux-gcp-edge0, 4.18.0-1004.5~18.04.1, 4.18.0-1005.6~18.04.1
Ubuntu:18.04:LTSlinux-hwe0, 4.18.0-13.14~18.04.1, 4.18.0-14.15~18.04.1

Timeline

References

Open in Interactive Console →