CVE-2019-9003
Fixed in a distro release EPSS 5%
In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.
Products: linux_kernel, netapp hci_management_node, netapp snapprotect, netapp solidfire, netapp cn1610_firmware, canonical ubuntu_linux, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.19.20-1 |
| Debian 13 | linux | 4.19.20-1 |
| Debian 14 | linux | 4.19.20-1 |
| Red Hat Enterprise Linux 8 | bpftool | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | bpftool-debuginfo | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-abi-whitelists | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-core | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug-core | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug-debuginfo | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug-devel | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug-modules | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debug-modules-extra | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-aarch64 | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-ppc64le | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-s390x | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-debuginfo-common-x86_64 | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-devel | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-doc | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-modules | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-modules-extra | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-tools | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-tools-debuginfo | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-tools-libs | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-tools-libs-devel | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-core | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-debuginfo | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-devel | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-modules | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | kernel-zfcpdump-modules-extra | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | perf | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | perf-debuginfo | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | python3-perf | 0:4.18.0-80.1.2.el8_0 |
| Red Hat Enterprise Linux 8 | python3-perf-debuginfo | 0:4.18.0-80.1.2.el8_0 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-default | 4.12.14-95.16.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-source | 4.12.14-95.16.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-syms | 4.12.14-95.16.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP4 | kernel-default | 4.12.14-95.16.1 |
| SUSE Linux Enterprise High Availability Extension 15 | kernel-default | 4.12.14-150.17.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP1 | kernel-default | 4.12.14-197.4.1 |
| SUSE Linux Enterprise Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_4 | 1-6.3.1 |
| SUSE Linux Enterprise Live Patching 15 | kernel-default | 4.12.14-150.17.1 |
| SUSE Linux Enterprise Live Patching 15 | kernel-livepatch-SLE15_Update_10 | 1-1.3.1 |
| SUSE Linux Enterprise Live Patching 15 SP1 | kernel-default | 4.12.14-197.4.1 |
| SUSE Linux Enterprise Live Patching 15 SP1 | kernel-livepatch-SLE15-SP1_Update_1 | 1-3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-default | 4.12.14-150.17.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-source | 4.12.14-150.17.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-zfcpdump | 4.12.14-150.17.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-default | 4.12.14-197.4.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-source | 4.12.14-197.4.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-zfcpdump | 4.12.14-197.4.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-docs | 4.12.14-150.17.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-obs-build | 4.12.14-150.17.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-source | 4.12.14-150.17.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-syms | 4.12.14-150.17.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-vanilla | 4.12.14-150.17.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-docs | 4.12.14-197.4.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-obs-build | 4.12.14-197.4.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-source | 4.12.14-197.4.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-syms | 4.12.14-197.4.1 |
| SUSE Linux Enterprise Module for Legacy 15 | kernel-default | 4.12.14-150.17.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP1 | kernel-default | 4.12.14-197.4.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-azure | 4.12.14-5.27.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-source-azure | 4.12.14-5.27.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-syms-azure | 4.12.14-5.27.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-azure | 4.12.14-6.12.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-default | 4.12.14-95.16.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source | 4.12.14-95.16.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source-azure | 4.12.14-6.12.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms | 4.12.14-95.16.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms-azure | 4.12.14-6.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-azure | 4.12.14-6.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-default | 4.12.14-95.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | 4.12.14-95.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source-azure | 4.12.14-6.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms | 4.12.14-95.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms-azure | 4.12.14-6.12.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-docs | 4.12.14-95.16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-obs-build | 4.12.14-95.16.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | kernel-default | 4.12.14-95.16.1 |
| SUSE Linux Enterprise Workstation Extension 15 | kernel-default | 4.12.14-150.17.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP1 | kernel-default | 4.12.14-197.4.1 |
| SUSE Real Time Module 15 SP1 | kernel-rt | 4.12.14-14.8.1 |
| SUSE Real Time Module 15 SP1 | kernel-rt_debug | 4.12.14-14.8.1 |
| SUSE Real Time Module 15 SP1 | kernel-source-rt | 4.12.14-14.8.1 |
| SUSE Real Time Module 15 SP1 | kernel-syms-rt | 4.12.14-14.8.1 |
| Ubuntu 18.04 LTS | linux-azure | 4.18.0-1014.14~18.04.1 |
| Ubuntu 18.04 LTS | linux-gcp-edge | 4.18.0-1008.9~18.04.1 |
| Ubuntu 18.04 LTS | linux-hwe | 4.18.0-17.18~18.04.1 |
| openSUSE Leap 15.0 | kernel-debug | 4.12.14-lp150.12.61.1 |
| openSUSE Leap 15.0 | kernel-default | 4.12.14-lp150.12.61.1 |
| openSUSE Leap 15.0 | kernel-docs | 4.12.14-lp150.12.61.1 |
| openSUSE Leap 15.0 | kernel-kvmsmall | 4.12.14-lp150.12.61.1 |
| openSUSE Leap 15.0 | kernel-obs-build | 4.12.14-lp150.12.61.1 |
| openSUSE Leap 15.0 | kernel-obs-qa | 4.12.14-lp150.12.61.1 |
| openSUSE Leap 15.0 | kernel-source | 4.12.14-lp150.12.61.1 |
| openSUSE Leap 15.0 | kernel-syms | 4.12.14-lp150.12.61.1 |
| openSUSE Leap 15.0 | kernel-vanilla | 4.12.14-lp150.12.61.1 |