← Back to CVEs
CVE-2019-19543
HIGH7.8
Description
In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c.
CVE Details
CVSS v3.1 Score7.8
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
Published12/3/2019
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
linux:linux_kernel
Weaknesses (CWE)
CWE-416
References
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.6(cve@mitre.org)
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=56cd26b618855c9af48c8301aa6754ced8dd0beb(cve@mitre.org)
https://security.netapp.com/advisory/ntap-20200924-0005/(cve@mitre.org)
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html(af854a3a-2127-422b-91ae-364da2661108)
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.6(af854a3a-2127-422b-91ae-364da2661108)
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=56cd26b618855c9af48c8301aa6754ced8dd0beb(af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20200924-0005/(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.