CVE-2019-13233
kernel: use-after-free in arch/x86/lib/insn-eval.c
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.
En arch/x86/lib/insn-eval.c en el kernel de Linux en versiones anteriores a la 5.1.9, hay un uso de memoria previamente liberada para acceder a una entrada LDT debido a una condición de carrera entre modify_ldt () y una excepción #BR para una violación de los límites de MPX.
A vulnerability was found in the arch/x86/lib/insn-eval.c function in the Linux kernel. An attacker could corrupt the memory due to a flaw in use-after-free access to an LDT entry caused by a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-07-04 CVE Reserved
- 2019-07-04 CVE Published
- 2024-06-27 EPSS Updated
- 2024-08-04 CVE Updated
- 2024-08-04 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
- CWE-416: Use After Free
CAPEC
References (18)
| URL | Tag | Source |
|---|---|---|
| http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html | X_refsource_misc |
|
| https://seclists.org/bugtraq/2019/Aug/13 | Mailing List |
|
| https://security.netapp.com/advisory/ntap-20190806-0001 | X_refsource_confirm |
|
| https://support.f5.com/csp/article/K13331647?utm_source=f5support&%3Butm_medium=RSS | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| https://bugs.chromium.org/p/project-zero/issues/detail?id=1879 | 2024-08-04 |
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html | 2023-11-07 | |
| https://access.redhat.com/errata/RHSA-2019:3309 | 2023-11-07 | |
| https://access.redhat.com/errata/RHSA-2019:3517 | 2023-11-07 | |
| https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.9 | 2023-11-07 | |
| https://usn.ubuntu.com/4093-1 | 2023-11-07 | |
| https://usn.ubuntu.com/4094-1 | 2023-11-07 | |
| https://usn.ubuntu.com/4117-1 | 2023-11-07 | |
| https://usn.ubuntu.com/4118-1 | 2023-11-07 | |
| https://www.debian.org/security/2019/dsa-4495 | 2023-11-07 | |
| https://access.redhat.com/security/cve/CVE-2019-13233 | 2020-07-07 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1727756 | 2020-07-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | < 5.1.9 Search vendor "Linux" for product "Linux Kernel" and version " < 5.1.9" | - |
Affected
| ||||||