CVE-2019-13233

CVSS v3.0 7 (High)

CVSS v2.0 4.4 (Medium)

EPSS 0.11 % (45^th)

Affected Products 1

Advisories 16

In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.

Weaknesses

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-416: Use After Free

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2019-07-04 13:15:11
(5 years ago)
Updated Date: 2023-11-07 03:03:48
(10 months ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel prior 5.1.9 version	cpe:2.3:o:linux:linux_kernel		< 5.1.9