CVE-2016-10905high
Description
An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2_clear_rgrpd and read_rindex_entry.
References
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html
https://support.f5.com/csp/article/K31332013
https://support.f5.com/csp/article/K31332013?utm_source=f5support&utm_medium=RSS
Details
Source: MITRE
Published: 2019-08-19
Updated: 2019-09-25
Type: CWE-416
Risk Information
CVSS v2
Base Score: 6.1
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:C
Impact Score: 8.5
Exploitability Score: 3.9
Severity: MEDIUM
CVSS v3
Base Score: 7.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 1.8
Severity: HIGH