2021-05-14 23:00:39 +00:00
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org" ,
"ID" : "CVE-2019-25044" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
]
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related to blk_mq_free_rqs and blk_cleanup_queue."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2" ,
"refsource" : "MISC" ,
"name" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2"
} ,
{
"url" : "https://sites.google.com/view/syzscope/kasan-use-after-free-read-in-blk_mq_free_rqs" ,
"refsource" : "MISC" ,
"name" : "https://sites.google.com/view/syzscope/kasan-use-after-free-read-in-blk_mq_free_rqs"
} ,
{
"url" : "https://syzkaller.appspot.com/bug?id=36fe241584203cf394d44560a42e3430434f1213" ,
"refsource" : "MISC" ,
"name" : "https://syzkaller.appspot.com/bug?id=36fe241584203cf394d44560a42e3430434f1213"
} ,
{
"url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c3e2219216c92919a6bd1711f340f5faa98695e6" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c3e2219216c92919a6bd1711f340f5faa98695e6"
2021-06-29 10:00:52 +00:00
} ,
{
"refsource" : "CONFIRM" ,
"name" : "https://security.netapp.com/advisory/ntap-20210629-0006/" ,
"url" : "https://security.netapp.com/advisory/ntap-20210629-0006/"
2021-05-14 23:00:39 +00:00
}
]
}
}