CVE-2019-10125

An issue was discovered in aiopoll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aiopollwake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfspoll(), and this will cause a use-after-free.

References

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10125.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "4.19"
            },
            {
                "fixed": "4.19.38"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.0"
            },
            {
                "fixed": "5.0.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "5.1-rc1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "9.5"
            }
        ]
    }
]