CVE-2019-25162

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: Fix a potential use after free

Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit to avoid the use after free.

[wsa: added comment to the code, added Fixes tag]

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6, < e6412ba3b6508bdf9c074d310bf4144afa6aec1a; >= 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6, < 23a191b132cd87f746c62f3dc27da33683d85829; >= 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6, < 871a1e94929a27bf6e2cd99523865c840bbc2d87; >= 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6, < 81cb31756888bb062e92d2dca21cd629d77a46a9; >= 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6, < 35927d7509ab9bf41896b7e44f639504eae08af7; >= 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6, < e8e1a046cf87c8b1363e5de835114f2779e2aaf4; >= 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6, < 12b0606000d0828630c033bf0c74c748464fe87d; >= 611e12ea0f121a31d9e9c4ce2a18a77abc2f28d6, < e4c72c06c367758a14f227c847f9d623f1994ecf
LinuxLinux4.3

References

Timeline

Published
Feb 26, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-25179.1Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploCVE-2019-25187.5Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18cCVE-2019-25196.1Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition StatusCVE-2019-25207.8Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are CVE-2019-25217.8Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are CVE-2019-252106.5An issue was discovered in Cloud Native Computing Foundation (CNCF) Helm through 3.13.3. It displays values of secrets when the --dry-run flCVE-2019-252119.1parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g., https://example.comCVE-2019-252124.9The video carousel slider with lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, anCVE-2019-252137.5The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.CVE-2019-252146.1The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versioCVE-2019-252157.3The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of theCVE-2019-252166.1The Rich Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the POST body 'update' parameter in versions up to, an
CVE-2019-25162: High severity, CVSS 7.8 | Vulnix