CVE-2019-25162

Updated: 2025-08-20 01:51:23.371353

Description:

In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit to avoid the use after free. [wsa: added comment to the code, added Fixes tag]


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Released CLSA-2025:1743193221 2024-08-01 14:34:07
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2024-07-11 04:58:59
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2024:1720468480 2024-07-23 17:18:30
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2024:1722977546 2024-08-06 17:34:23
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2024:1722977984 2024-08-06 17:34:23
CentOS Stream 8 ELS kernel 4.18.0 7.8 HIGH Already Fixed 2024-06-29 10:09:13
CloudLinux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2024-07-11 04:58:59
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2024-07-11 04:58:58
RHEL 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2025:1750353839 2025-06-20 00:28:28
TuxCare 9.6 ESU kernel 5.14.0 7.8 HIGH Already Fixed 2025-08-18 00:47:24
Total: 13