CVE-2019-3896
At a glance Severity HIGH 7.0 EPSS EPSS 0.42 % · percentile 36 (2026-10-27) State PUBLISHED Published 2019-06-18 Updated 2024-08-04 Assigner redhat NVD status Modified Description A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).
Scores Version Score Vector Scored by CVSS 3.0 HIGH 7.0 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H redhat CVSS 3.0 HIGH 7.0 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · secalert@redhat.com (Secondary) CVSS 3.0 HIGH 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 HIGH 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 2.6.0 ≤ 2.6.39.4cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*Affected products
References
Sources
