Published: 07/06/2021 Updated: 29/04/2022

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

An issue exists in the Linux kernel prior to 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
netapp solidfire baseboard management controller firmware -
netapp cloud backup -
netapp solidfire & hci management node -
netapp h500s firmware -
netapp h700s firmware -
netapp h300e firmware -
netapp h500e firmware -
netapp h700e firmware -
netapp h410s firmware -
netapp h410c firmware -
netapp h610c firmware -
netapp h610s firmware -
netapp h615c firmware -
netapp h300s firmware -
netapp fas 8300 firmware -
netapp fas 8700 firmware -
netapp aff 8300 firmware -
netapp aff 8700 firmware -
netapp aff a400 firmware -
netapp fabric-attached storage a400 firmware -
netapp aff a700s firmware -

CWE-416 https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.19 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dbb2483b2a46fbaf833cfb5deb5ed9cace9c7399 https://syzkaller.appspot.com/bug?id=f99edaeec58ad40380ed5813d89e205861be2896 https://sites.google.com/view/syzscope/warning-in-xfrm_state_fini-2 https://security.netapp.com/advisory/ntap-20210720-0003/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-25045

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect