CVE-2019-20934

CVE	CVE-2019-20934
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2020-11-28 07:15:00 UTC
Updated	2021-01-12 13:49:00 UTC
Description	An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-free in show_numa_stats() because NUMA fault statistics are inappropriately freed, aka CID-16d51a590a8c.

Problem Types: CWE-416

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	All	All	All	All
Operating System	Linux	Linux Kernel	5.3	rc1	All	All
Operating System	Linux	Linux Kernel	All	All	All	All
Operating System	Linux	Linux Kernel	5.3	rc1	All	All
Operating System	Linux	Linux Kernel	All	All	All	All

Reference	Source	Link	Tags
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.6	MISC	cdn.kernel.org	Vendor Advisory
1913 - project-zero - Project Zero - Monorail	MISC	bugs.chromium.org	Issue Tracking, Vendor Advisory
kernel/git/torvalds/linux.git - Linux kernel source tree	MISC	git.kernel.org	Patch, Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

159310 Oracle Enterprise Linux Security Update for kernel (ELSA-2021-2725)
239523 Red Hat Update for kernel-rt (RHSA-2021:2726)
239524 Red Hat Update for kernel (RHSA-2021:2725)
257100 CentOS Security Update for kernel (CESA-2021:2725)
375284 EulerOS Security Update for kernel (EulerOS-SA-2021-1311)
390217 Oracle Managed Virtualization (VM) Server for x86 Security Update for Unbreakable Enterprise kernel (OVMSA-2021-0001)
390234 Oracle Managed Virtualization (VM) Server for x86 Security Update for kernel (OVMSA-2021-0001)
670185 EulerOS Security Update for kernel (EulerOS-SA-2021-1684)
750428 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:0075-1)