CVE-2019-11815

A flaw was found in the Linux kernel's implementation of RDS over TCP. A system that has the rds_tcp kernel module loaded (either through autoload via local process running listen(), or manual loading) could possibly cause a use after free (UAF) in which an attacker who is able to manipulate socket state while a network namespace is being torn down. This can lead to possible memory corruption and privilege escalation.

The affected code is not built in the following kernels:

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux MRG-2
• Red Hat Enterprise Linux for ARM (kernel-alt).
• Red Hat Enterprise Linux 8

These kernels are not affected.

The affected code was introduced by commit bdf5bd7f21323493dbe5f2c723dc33f2fbb0241a.

This affected commit is not present in the following kernels:

• Red Hat Enterprise Linux 5
• Red Hat Enterprise Linux 6

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.