CVE-2019-20811

Aliases:UBUNTU-CVE-2019-20811DEBIAN-CVE-2019-20811
Advisory lineage Upstream: 0 Downstream: 14
Modified
Published: 03 Jun 2020, 02:44
Last modified:05 Aug 2024, 02:53

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.44% LOW
0% probability +0.41%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Jun 2020, 02:44
Published
Vulnerability first disclosed
05 Aug 2024, 02:53
Last Modified
Vulnerability information updated

Description

An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.

CVSS Metrics

  • v3.1MEDIUMScore: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
  • v2.0LOWScore: 2.1AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS Trends

Current EPSS score: 0.44% Percentile: 38%

Affected Systems

  • canonicalubuntu_linux

    14.04 | 16.04

  • debianlinux

    < 4.19.37-1 | < 4.19.37-1 | < 4.19.37-1 | < 4.19.37-1

  • ubuntulinux

    all | < 4.4.0-190.220 | < 4.15.0-60.67

  • ubuntulinux-aws

    < 4.4.0-1078.82 | < 4.4.0-1114.127 | < 4.15.0-1047.49

  • ubuntulinux-aws-5.0

    all

  • ubuntulinux-aws-fips

    < 4.15.0-2018.18 | all

  • ubuntulinux-aws-hwe

    < 4.15.0-1047.49~16.04.1

  • ubuntulinux-azure

    < 4.15.0-1059.64~14.04.1 | < 4.15.0-1056.61 | all

  • ubuntulinux-azure-edge

    all

  • ubuntulinux-azure-fde

    all

  • ubuntulinux-azure-fips

    < 4.15.0-2006.7 | all

  • ubuntulinux-bluefield

    all

  • ubuntulinux-fips

    < 4.4.0-1046.51 | all

  • ubuntulinux-gcp

    < 4.15.0-1041.43 | all

  • ubuntulinux-gcp-edge

    all

  • ubuntulinux-gcp-fips

    all

  • ubuntulinux-gke

    all

  • ubuntulinux-gke-4.15

    < 4.15.0-1041.43

  • ubuntulinux-hwe

    < 4.15.0-60.67~16.04.1 | < 5.0.0-23.24~18.04.1

  • ubuntulinux-hwe-edge

    all

  • ubuntulinux-intel-iot-realtime

    all

  • ubuntulinux-kvm

    < 4.4.0-1080.87 | < 4.15.0-1043.43

  • ubuntulinux-lts-xenial

    < 4.4.0-190.220~14.04.1

  • ubuntulinux-oem

    < 4.15.0-1056.65

  • ubuntulinux-oracle

    < 4.15.0-1022.25~16.04.1 | < 4.15.0-1022.25

  • ubuntulinux-oracle-5.0

    all

  • ubuntulinux-raspi-realtime

    all

  • ubuntulinux-raspi2

    < 4.4.0-1139.148 | < 4.15.0-1044.47 | all

  • ubuntulinux-realtime

    all

  • ubuntulinux-riscv

    all

  • ubuntulinux-snapdragon

    < 4.4.0-1143.152 | < 4.15.0-1062.69

  • debiandebian_linux

    8.0 | 9.0

  • linuxlinux_kernel

    < 5.0.6

References (10)