Linux kernel memory misreference vulnerability (CNVD-2019-47010)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory misreference vulnerability exists in sockfssetattr in Linux kernel versions 4.20.10 and earlier, which stems from the 'afalgrelease' function in the...

CVE-2019-8912

CVE-2019-8912 affects the Linux kernel up to version 4.20.11. The vulnerability stems from af_alg_release() in crypto/af_alg.c not setting a needed NULL value for a member of a structure, which enables a use-after-free in sockfs_setattr. The supplied documents describe the affected component and ...