Tracker / CVE-2019-10125
CVE-2019-10125
Critical 9.8
An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · 4.19 → 4.19.38 |
| linux | linux_kernel · 5.0 → 5.0.5 |
| netapp | active_iq_unified_manager · 9.5 → … |
| netapp | cn1610_firmware |
| netapp | hci_management_node |
| netapp | snapprotect |
| netapp | solidfire |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.