Unrated severityNVD Advisory· Published Nov 7, 2019· Updated Aug 5, 2024

CVE-2019-18814

Description

An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.

Affected products

Linux/Linux kerneldescription
osv-coords45 versions
pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP2 pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP3 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.0 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.0 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP3 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_12&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP2 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP3 pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP2 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.0 pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2 pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP2 pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP3 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3 pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2 pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP2 pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP3 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3 pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP2 pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3
< 5.3.18-59.5.2+ 44 more
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 5.3.18-18.41.1
- (no CPE)range: < 5.3.18-38.3.1
- (no CPE)range: < 5.3.18-24.61.1.9.26.4
- (no CPE)range: < 5.3.18-24.61.1.9.26.4
- (no CPE)range: < 5.3.18-59.5.2.18.2.2
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 1-5.3.4
- (no CPE)range: < 1-7.5.1
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.1
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 5.3.18-33.1
- (no CPE)range: < 5.3.18-8.7.1
- (no CPE)range: < 5.3.18-33.1
- (no CPE)range: < 5.3.18-18.41.1
- (no CPE)range: < 5.3.18-38.3.1
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.2
- (no CPE)range: < 5.3.18-33.1
- (no CPE)range: < 5.3.18-18.41.1
- (no CPE)range: < 5.3.18-38.3.1
- (no CPE)range: < 5.3.18-24.61.1
- (no CPE)range: < 5.3.18-59.5.1
- (no CPE)range: < 5.3.18-33.1
- (no CPE)range: < 5.3.18-59.5.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

lists.debian.org/debian-lts-announce/2020/08/msg00019.htmlmitremailing-listx_refsource_MLIST
lore.kernel.org/patchwork/patch/1142523/mitrex_refsource_MISC
security.netapp.com/advisory/ntap-20191205-0001/mitrex_refsource_CONFIRM
support.f5.com/csp/article/K21561554mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000