CVE-2019-20811

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6Release Notes, Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9ePatch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2020/06/msg00012.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4527-1/Third Party Advisory
https://www.debian.org/security/2020/dsa-4698Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6Release Notes, Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9ePatch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2020/06/msg00012.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4527-1/Third Party Advisory
https://www.debian.org/security/2020/dsa-4698Third Party Advisory

Timeline

Published: Jun 3, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-208125.5An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a d CVE-2019-208137.5An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference.CVE-2019-208147.5An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an applicat CVE-2019-208157.5An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing.CVE-2019-208167.5An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data.CVE-2019-208177.5An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference.CVE-2019-208187.5An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an CVE-2019-208197.5An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing.CVE-2019-20828.8In libxaac there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additiona CVE-2019-208207.5An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data.CVE-2019-208217.5An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference.CVE-2019-208229.8An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrec