UBUNTU-CVE-2019-11815

Details

An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.

Affected Packages(39 packages)

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-150.176

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1084.94

linux-aws-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1047.49~16.04.1

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1051.56

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1037.39~16.04.1

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-55.60~16.04.2

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1047.53

linux-oracle

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1018.20~16.04.1

linux-raspi2

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1110.118

linux-snapdragon

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1114.119

References

REPORT

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8

REPORT

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb66ddd156203daefb8d71158036b27b0e2caf63

REPORT

https://ubuntu.com/security/CVE-2019-11815

ADVISORY

https://ubuntu.com/security/notices/USN-4005-1

ADVISORY

https://ubuntu.com/security/notices/USN-4008-1

ADVISORY

https://ubuntu.com/security/notices/USN-4008-3

ADVISORY

https://ubuntu.com/security/notices/USN-4068-1

ADVISORY

https://ubuntu.com/security/notices/USN-4068-2

ADVISORY

https://ubuntu.com/security/notices/USN-4118-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2019-11815