This has been fixed for some time. Please see the Ubuntu CVE Tracker for
kernel version information:

https://people.canonical.com/~ubuntu-
security/cve/2019/CVE-2019-11815.html

** Changed in: linux (Ubuntu)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1829055

Title:
  CVE-2019-11815

Status in linux package in Ubuntu:
  Fix Released
Status in linux package in Debian:
  Fix Released

Bug description:
  An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the
  Linux kernel before 5.0.8. There is a race condition leading to a use-
  after-free, related to net namespace cleanup.

  This is a remotely exploitable bug, and seems to be relevant for all
  current versions of ubuntu, including LTS ones.

  Debian CVE : https://security-
  tracker.debian.org/tracker/CVE-2019-11815

  Fixed by:
  https://git.kernel.org/linus/cb66ddd156203daefb8d71158036b27b0e2caf63

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1829055/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to