QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-11487

Back to search

CVE-2019-11487

Published: Apr 23, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.

VendorProductVersions

n/a

n/a

affected
n/a

References

108054
vdb-entry
x_refsource_BID
openSUSE-SU-2019:1570
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2019:1571
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2019:1579
vendor-advisory
x_refsource_SUSE
USN-4069-1
vendor-advisory
x_refsource_UBUNTU
USN-4069-2
vendor-advisory
x_refsource_UBUNTU
USN-4115-1
vendor-advisory
x_refsource_UBUNTU
USN-4118-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2019:2703
vendor-advisory
x_refsource_REDHAT
RHSA-2019:2741
vendor-advisory
x_refsource_REDHAT
USN-4145-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2020:0174
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now
CVE-2019-11487 - Security Vulnerability | QwikSec