CVE-2019-11486

Published: Apr 23, 2019Modified: Jun 17, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions.

Affected (17)

Products: Linux: Linux Kernel · Debian: Debian Linux · Opensuse: Leap · +1 more

Show all products

Linux: Linux Kernel · Debian: Debian Linux · Opensuse: Leap · Netapp: Active Iq, Hci Management Node, Snapprotect, Solidfire, Storage Replication Adapter For Clustered Data Ontap, Vasa Provider For Clustered Data Ontap, Virtual Storage Console

1 product

1 product

1 product

7 products

Hci Management Node

Storage Replication Adapter For Clustered Data Ontap

Vasa Provider For Clustered Data Ontap

Virtual Storage Console

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.16.66
Linux Linux Kernel	From 3.17 to 3.18.139
Linux Linux Kernel	From 3.19 to 4.4.179
Linux Linux Kernel	From 4.10 to 4.14.112
Linux Linux Kernel	From 4.15 to 4.19.35
Linux Linux Kernel	From 4.20 to 5.0.8
Linux Linux Kernel	From 4.5 to 4.9.169

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 9.0
Opensuse Leap	Version 15.1
Opensuse Leap	Version 42.3

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq	All versions
Netapp Hci Management Node	All versions
Netapp Snapprotect	All versions
Netapp Solidfire	All versions
Netapp Storage Replication Adapter For Clustered Data Ontap	Version 9.7
Netapp Vasa Provider For Clustered Data Ontap	Version 9.7
Netapp Virtual Storage Console	Version 9.7

Related CWEs

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (34)

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/04/29/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.112

Source: cve@mitre.org

Vendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.35

Source: cve@mitre.org

Vendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.169

Source: cve@mitre.org

Vendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8

Source: cve@mitre.org

Vendor Advisory

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c7084edc3f6d67750f50d4183134c4fb5712a5c8

Source: cve@mitre.org

PatchVendor Advisory

https://github.com/torvalds/linux/commit/c7084edc3f6d67750f50d4183134c4fb5712a5c8

Source: cve@mitre.org

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html

Source: cve@mitre.org

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html

Source: cve@mitre.org

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html

Source: cve@mitre.org

Third Party Advisory

https://seclists.org/bugtraq/2019/Jun/26

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20190517-0005/

Source: cve@mitre.org

Third Party Advisory

https://support.f5.com/csp/article/K50222414

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2019/dsa-4465

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/04/29/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.112

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.35

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.169

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c7084edc3f6d67750f50d4183134c4fb5712a5c8

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://github.com/torvalds/linux/commit/c7084edc3f6d67750f50d4183134c4fb5712a5c8

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://seclists.org/bugtraq/2019/Jun/26

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20190517-0005/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.f5.com/csp/article/K50222414

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2019/dsa-4465

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.