UBUNTU-CVE-2019-8912

Details

In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.

Affected Packages(16 packages)

linux-azure

Ubuntu 14.04 LTS

Fixed in:

4.15.0-1041.45~14.04.1

linux-aws-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1035.37~16.04.1

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1041.45

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1029.31~16.04.1

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-47.50~16.04.1

linux-oracle

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1010.12~16.04.1

linux

Ubuntu 18.04 LTS

Fixed in:

4.15.0-47.50

linux-aws

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1035.37

linux-azure

Ubuntu 18.04 LTS

Fixed in:

4.18.0-1014.14~18.04.1

linux-gcp

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1029.31

References

REPORT

https://ubuntu.com/security/CVE-2019-8912

ADVISORY

https://ubuntu.com/security/notices/USN-3930-1

ADVISORY

https://ubuntu.com/security/notices/USN-3930-2

ADVISORY

https://ubuntu.com/security/notices/USN-3931-1

ADVISORY

https://ubuntu.com/security/notices/USN-3931-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2019-8912