CVE-2019-25162

Published: Feb 26, 2024Modified: Aug 4, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit to avoid the use after free. [wsa: added comment to the code, added Fixes tag]

Affected (7)

Products: Linux: Linux Kernel

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	4.15.0 ≤ version < 4.19.256
Linux Linux Kernel	4.20.0 ≤ version < 5.4.211
Linux Linux Kernel	4.3.0 ≤ version < 4.14.291
Linux Linux Kernel	5.11.0 ≤ version < 5.15.61
Linux Linux Kernel	5.16.0 ≤ version < 5.18.18
Linux Linux Kernel	5.19.0 ≤ version < 5.19.2
Linux Linux Kernel	5.5.0 ≤ version < 5.10.137

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (16)

https://git.kernel.org/stable/c/12b0606000d0828630c033bf0c74c748464fe87d

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/23a191b132cd87f746c62f3dc27da33683d85829

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/35927d7509ab9bf41896b7e44f639504eae08af7

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/81cb31756888bb062e92d2dca21cd629d77a46a9

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/871a1e94929a27bf6e2cd99523865c840bbc2d87

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/e4c72c06c367758a14f227c847f9d623f1994ecf

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/e6412ba3b6508bdf9c074d310bf4144afa6aec1a

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/e8e1a046cf87c8b1363e5de835114f2779e2aaf4

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/12b0606000d0828630c033bf0c74c748464fe87d

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/23a191b132cd87f746c62f3dc27da33683d85829

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/35927d7509ab9bf41896b7e44f639504eae08af7

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/81cb31756888bb062e92d2dca21cd629d77a46a9

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/871a1e94929a27bf6e2cd99523865c840bbc2d87

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/e4c72c06c367758a14f227c847f9d623f1994ecf

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/e6412ba3b6508bdf9c074d310bf4144afa6aec1a

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/e8e1a046cf87c8b1363e5de835114f2779e2aaf4

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.