Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-25044

No fix known EPSS <1%

The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related to blk_mq_free_rqs and blk_cleanup_queue.

Published 2021-05-14 · CVE record · OSV

Products: linux_kernel, netapp cloud_backup, netapp solidfire_&_hci_management_node, netapp solidfire_baseboard_management_controller_firmware, netapp h300s_firmware, netapp h500s_firmware, netapp h700s_firmware, netapp h300e_firmware, netapp h500e_firmware, netapp h700e_firmware, netapp h410s_firmware, netapp h410c_firmware

Distro releases

ReleasePackageFixed in
Ubuntu 16.04 LTSlinux-hwe-edgeno fix
Ubuntu 18.04 LTSlinux-aws-5.0no fix
Ubuntu 18.04 LTSlinux-aws-5.3no fix
Ubuntu 18.04 LTSlinux-azureno fix
Ubuntu 18.04 LTSlinux-azure-5.3no fix
Ubuntu 18.04 LTSlinux-azure-edgeno fix
Ubuntu 18.04 LTSlinux-gcpno fix
Ubuntu 18.04 LTSlinux-gcp-5.3no fix
Ubuntu 18.04 LTSlinux-gcp-edgeno fix
Ubuntu 18.04 LTSlinux-gke-4.15no fix
Ubuntu 18.04 LTSlinux-hweno fix
Ubuntu 18.04 LTSlinux-hwe-edgeno fix
Ubuntu 18.04 LTSlinux-oemno fix
Ubuntu 18.04 LTSlinux-oracle-5.0no fix
Ubuntu 18.04 LTSlinux-oracle-5.3no fix
Ubuntu 20.04 LTSlinux-raspi2no fix
Ubuntu 20.04 LTSlinux-riscvno fix