UBUNTU-CVE-2019-8912
In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.
02 / AFFECTED SOFTWARE
Affected packages
9 explicit affected versions
4 explicit affected versions
32 explicit affected versions
27 explicit affected versions
47 explicit affected versions
3 explicit affected versions
26 explicit affected versions
21 explicit affected versions
23 explicit affected versions
19 explicit affected versions
4 explicit affected versions
4 explicit affected versions
20 explicit affected versions
17 explicit affected versions
3 explicit affected versions
22 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.
05 / REFERENCES