CVE-2019-11815: Canonical Ubuntu Linux

High severity, CVSS 8.1. EPSS: 4.5% chance of exploitation in the next 30 days.

An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 19.04 only
• Debian Debian Linux: version 8.0 only; version 9.0 only
• Linux Linux Kernel: from 4.3, before 4.4.179 (fixed in 4.4.179); from 4.9, before 4.9.169 (fixed in 4.9.169); from 4.14, before 4.14.112 (fixed in 4.14.112); from 4.19, before 4.19.35 (fixed in 4.19.35); from 5.0, before 5.0.8 (fixed in 5.0.8); version 5.1 only
• Netapp Active Iq Unified Manager: from 9.5
• Netapp CN1610 Firmware: affected versions not specified
• Netapp Hci Compute Node: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Hci Storage Node: affected versions not specified
• Netapp Snapprotect: affected versions not specified
• Netapp Solidfire: affected versions not specified
• Netapp Storage Replication Adapter: version 7.2 only
• Netapp Vasa Provider For Clustered Data Ontap: from 7.2
• Netapp Virtual Storage Console: from 7.2
• Opensuse Leap: version 15.0 only; version 15.1 only; version 42.3 only

Published 2019-05-08. Last modified 2026-06-17.