Oval Definition:	oval:com.ubuntu.bionic:def:201911487000
Revision Date: 2019-04-23 Version: 1 Title: CVE-2019-11487 on Ubuntu 18.04 LTS (bionic) - medium. Description: The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests. Family: unix Class: vulnerability Status: Reference(s): CVE-2019-11487 Platform(s): Ubuntu 18.04 LTS Product(s): Definition Synopsis Ubuntu 18.04 LTS (bionic) is installed. AND Package Information The vulnerability of the 'linux' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-aws' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-azure' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-azure-edge' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-gcp' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-gcp-edge' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-gke' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-hwe' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-hwe-edge' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-kvm' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-oem' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-oracle' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-raspi2' package in bionic is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'linux-snapdragon' package in bionic is not known (status: 'needs-triage'). It is pending evaluation.
BACK