An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/107655 | Third Party Advisory VDB Entry |
| https://patchwork.kernel.org/patch/10828359/ | Exploit Patch Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20190411-0003/ | Third Party Advisory |
| https://support.f5.com/csp/article/K29215970 | Third Party Advisory |
| http://www.securityfocus.com/bid/107655 | Third Party Advisory VDB Entry |
| https://patchwork.kernel.org/patch/10828359/ | Exploit Patch Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20190411-0003/ | Third Party Advisory |
| https://support.f5.com/csp/article/K29215970 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
| AND |
|
History
21 Nov 2024, 04:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/107655 - Third Party Advisory, VDB Entry | |
| References | () https://patchwork.kernel.org/patch/10828359/ - Exploit, Patch, Vendor Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20190411-0003/ - Third Party Advisory | |
| References | () https://support.f5.com/csp/article/K29215970 - Third Party Advisory |
02 Jun 2021, 15:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:5.1:rc1:*:*:*:*:*:* |
Information
Published : 2019-03-27 06:29
Updated : 2024-11-21 04:18
NVD link : CVE-2019-10125
Mitre link : CVE-2019-10125
CVE.ORG link : CVE-2019-10125
JSON object : View
Products Affected
netapp
- solidfire
- snapprotect
- cn1610_firmware
- cn1610
- active_iq_unified_manager
- hci_management_node
linux
- linux_kernel
CWE
CWE-416
Use After Free