摘要:
In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace
安全等级: Low
公告ID: KylinSec-SA-2024-3305
发布日期: 2024年8月20日
关联CVE: CVE-2019-19770
In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace
cve名称 | 产品 | 组件 | 是否受影响 |
---|---|---|---|
CVE-2019-19770 | KY3.4-5A | kernel | Unaffected |
CVE-2019-19770 | KY3.5.2 | kernel | Unaffected |
CVE-2019-19770 | V6 | kernel | Unaffected |