CVE-2019-20811
Vulnerability Summary
Timeline
Description
An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- v2.0•LOW•Score: 2.1AV:L/AC:L/Au:N/C:N/I:P/A:N
EPSS Trends
Current EPSS score: 0.44%• Percentile: 38%
Affected Systems
- canonical•ubuntu_linux
14.04 | 16.04
- debian•linux
< 4.19.37-1 | < 4.19.37-1 | < 4.19.37-1 | < 4.19.37-1
- ubuntu•linux
all | < 4.4.0-190.220 | < 4.15.0-60.67
- ubuntu•linux-aws
< 4.4.0-1078.82 | < 4.4.0-1114.127 | < 4.15.0-1047.49
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-fips
< 4.15.0-2018.18 | all
- ubuntu•linux-aws-hwe
< 4.15.0-1047.49~16.04.1
- ubuntu•linux-azure
< 4.15.0-1059.64~14.04.1 | < 4.15.0-1056.61 | all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fips
< 4.15.0-2006.7 | all
- ubuntu•linux-bluefield
all
- ubuntu•linux-fips
< 4.4.0-1046.51 | all
- ubuntu•linux-gcp
< 4.15.0-1041.43 | all
- ubuntu•linux-gcp-edge
all
- ubuntu•linux-gcp-fips
all
- ubuntu•linux-gke
all
- ubuntu•linux-gke-4.15
< 4.15.0-1041.43
- ubuntu•linux-hwe
< 4.15.0-60.67~16.04.1 | < 5.0.0-23.24~18.04.1
- ubuntu•linux-hwe-edge
all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-kvm
< 4.4.0-1080.87 | < 4.15.0-1043.43
- ubuntu•linux-lts-xenial
< 4.4.0-190.220~14.04.1
- ubuntu•linux-oem
< 4.15.0-1056.65
- ubuntu•linux-oracle
< 4.15.0-1022.25~16.04.1 | < 4.15.0-1022.25
- ubuntu•linux-oracle-5.0
all
- ubuntu•linux-raspi-realtime
all
- ubuntu•linux-raspi2
< 4.4.0-1139.148 | < 4.15.0-1044.47 | all
- ubuntu•linux-realtime
all
- ubuntu•linux-riscv
all
- ubuntu•linux-snapdragon
< 4.4.0-1143.152 | < 4.15.0-1062.69
- debian•debian_linux
8.0 | 9.0
- linux•linux_kernel
< 5.0.6
References (10)
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9e
- https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
- https://www.debian.org/security/2020/dsa-4698
- https://usn.ubuntu.com/4527-1/
- https://ubuntu.com/security/CVE-2019-20811
- https://git.kernel.org/linus/a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9e
- https://ubuntu.com/security/notices/USN-4527-1
- https://www.cve.org/CVERecord?id=CVE-2019-20811
- https://security-tracker.debian.org/tracker/CVE-2019-20811