Lucene search

416baaa9-dc9f-4396-8d5f-8c081fb06d67CVE-2019-25162

HistoryFeb 26, 2024 - 6:15 p.m.

CVE-2019-25162

2024-02-2618:15:07

CWE-416

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

1009

cve-2019-25162

linux kernel

i2c

use after free

vulnerability

security fix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

In the Linux kernel, the following vulnerability has been resolved:

i2c: Fix a potential use after free

Free the adap structure only after we are done using it.
This patch just moves the put_device() down a bit to avoid the
use after free.

[wsa: added comment to the code, added Fixes tag]

Affected configurations

Vulners

NVD

Node

linuxlinux_kernelRange4.3–4.14.291

linuxlinux_kernelRange4.15.0–4.19.256

linuxlinux_kernelRange4.20.0–5.4.211

linuxlinux_kernelRange5.5.0–5.10.137

linuxlinux_kernelRange5.11.0–5.15.61

linuxlinux_kernelRange5.16.0–5.18.18

linuxlinux_kernelRange5.19.0–5.19.2

linuxlinux_kernelRange5.20.0–6.0

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/i2c/i2c-core-base.c"
    ],
    "versions": [
      {
        "version": "611e12ea0f12",
        "lessThan": "e6412ba3b650",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "611e12ea0f12",
        "lessThan": "23a191b132cd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "611e12ea0f12",
        "lessThan": "871a1e94929a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "611e12ea0f12",
        "lessThan": "81cb31756888",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "611e12ea0f12",
        "lessThan": "35927d7509ab",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "611e12ea0f12",
        "lessThan": "e8e1a046cf87",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "611e12ea0f12",
        "lessThan": "12b0606000d0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "611e12ea0f12",
        "lessThan": "e4c72c06c367",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/i2c/i2c-core-base.c"
    ],
    "versions": [
      {
        "version": "4.3",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.3",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.14.291",
        "lessThanOrEqual": "4.14.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.19.256",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.211",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.137",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.61",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.18.18",
        "lessThanOrEqual": "5.18.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.19.2",
        "lessThanOrEqual": "5.19.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.0",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]