CVE-2019-10125
published 2019-03-27CVE-2019-10125: An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is…
PriorityP344critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
5.26%
91.6th percentile
An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 4.19.37-1 (bookworm) | linux 4.19.37-1 (bookworm) |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 4.19.37-1 | 4.19.37-1 |
| linux | linux_kernel | >= 0 < 4.19.37-1 | 4.19.37-1 |
| linux | linux_kernel | >= 0 < 4.19.37-1 | 4.19.37-1 |
| linux | linux_kernel | >= 0 < 4.19.37-1 | 4.19.37-1 |
| linux | linux_kernel | >= 4.19 < 4.19.38 | 4.19.38 |
| linux | linux_kernel | >= 5.0 < 5.0.5 | 5.0.5 |
| netapp | active_iq_unified_manager | >= 9.5 | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: use-after-free in aio_poll() in fs/aio.c
vendor_redhat·2019-02-25·CVSS 9.8
CVE-2019-10125 [CRITICAL] CWE-119 kernel: use-after-free in aio_poll() in fs/aio.c
kernel: use-after-free in aio_poll() in fs/aio.c
An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.
A flaw was found in the Linux kernel's aio_poll() function. Due to incorrect logic, this flaw can create a use-after-free memory condition where an attacker could submit malicious input to possibly execute arbitrary code resulting in privilege escalation.
Package: kernel (Red Hat Enterprise Linux 5) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-alt (Red H
Debian
CVE-2019-10125: linux - An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5....
vendor_debian·2019·CVSS 9.8
CVE-2019-10125 [CRITICAL] CVE-2019-10125: linux - An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5....
An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.
Scope: local
bookworm: resolved (fixed in 4.19.37-1)
bullseye: resolved (fixed in 4.19.37-1)
forky: resolved (fixed in 4.19.37-1)
sid: resolved (fixed in 4.19.37-1)
trixie: resolved (fixed in 4.19.37-1)
GHSA
GHSA-xg7j-75jq-gm7f: An issue was discovered in aio_poll() in fs/aio
ghsa_unreviewed·2022-05-13
CVE-2019-10125 [CRITICAL] CWE-416 GHSA-xg7j-75jq-gm7f: An issue was discovered in aio_poll() in fs/aio
An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.
OSV
CVE-2019-10125: An issue was discovered in aio_poll() in fs/aio
osv·2019-03-27·CVSS 9.8
CVE-2019-10125 [CRITICAL] CVE-2019-10125: An issue was discovered in aio_poll() in fs/aio
An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.
Suricata
GPL IMAP login buffer overflow attempt
suricata·2010-09-23
CVE-1999-0005 GPL IMAP login buffer overflow attempt
GPL IMAP login buffer overflow attempt
Rule: alert tcp $EXTERNAL_NET any -> $HOME_NET 143 (msg:"GPL IMAP login buffer overflow attempt"; flow:established,to_server; content:"LOGIN"; isdataat:100,relative; pcre:"/\sLOGIN\s[^\n]{100}/smi"; reference:bugtraq,13727; reference:bugtraq,502; reference:cve,1999-0005; reference:cve,1999-1557; reference:cve,2005-1255; reference:nessus,10123; reference:cve,2007-2795; reference:nessus,10125; classtype:attempted-user; sid:2101842; rev:16; metadata:created_at 2010_09_23, cve CVE_1999_0005, confidence High, signature_severity Major, updated_at 2019_07_26;)
No public exploits indexed.
Bugzilla
CVE-2019-10125 kernel: use-after-free in aio_poll() in fs/aio.c
bugzilla·2019-04-02·CVSS 9.8
CVE-2019-10125 [CRITICAL] CVE-2019-10125 kernel: use-after-free in aio_poll() in fs/aio.c
CVE-2019-10125 kernel: use-after-free in aio_poll() in fs/aio.c
An use-after-free flaw was discovered in aio_poll() in fs/aio.c in the Linux kernel. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.
The use-after-free could possibly be used to create memory corruption or possibly priviledge escalation by a determined attacker.
References:
https://patchwork.kernel.org/patch/10828359/
Discussion:
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 1695075]
---
The linked patch is actually not sufficient, the patch that went upstream is commit 84c4e1f89fefe70554da0ab33be72c9be7994379 and included in 5.0.5 stable.
This was
Bugzilla
CVE-2019-10125 kernel: use-after-free in aio_poll() in fs/aio.c [fedora-all]
bugzilla·2019-04-02·CVSS 9.8
CVE-2019-10125 [CRITICAL] CVE-2019-10125 kernel: use-after-free in aio_poll() in fs/aio.c [fedora-all]
CVE-2019-10125 kernel: use-after-free in aio_poll() in fs/aio.c [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions
arXiv
B-Side: Binary-Level Static System Call Identification
arxiv_fulltext·2024-10-23
B-Side: Binary-Level Static System Call Identification
none
20242024
[MIDDLEWARE '24]24th International Middleware ConferenceDecember 2--6, 2024Hong Kong, Hong Kong
24th International Middleware Conference (MIDDLEWARE '24), December 2--6, 2024, Hong Kong, Hong Kong
10.1145/3652892.3700761
979-8-4007-0623-3/24/12
: Binary-Level Static System Call Identification
Gaspard Thévenon
ENS Lyon
Lyon
France
Kevin Nguetchouang
Grenoble INP
Grenoble
France
Kahina Lazri
Orange Innovation
Paris
France
Alain Tchana
Grenoble INP
Grenoble
France
| Pierre Olivier
The University of Manchester
Manchester
United Kingdom
## Abstract
System call filtering is widely used to secure programs in multi-tenant environments, and to sandbox applications in modern desktop software deployment and package management systems.
Filtering rules are hard to write and m
http://www.securityfocus.com/bid/107655https://patchwork.kernel.org/patch/10828359/https://security.netapp.com/advisory/ntap-20190411-0003/https://support.f5.com/csp/article/K29215970http://www.securityfocus.com/bid/107655https://patchwork.kernel.org/patch/10828359/https://security.netapp.com/advisory/ntap-20190411-0003/https://support.f5.com/csp/article/K29215970
2019-03-27
Published