CVE-2019-25162
HIGHLinux Kernel 4.3.0-4.14.291 - Use-After-Free in I2C Adapter Structure
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25162. PoCs published by uthrasri.
AI-analyzed exploit summary This repository contains kernel source code files related to the I2C subsystem, specifically focusing on the vulnerable components associated with CVE-2019-25162. The files include implementations for I2C board info registration, ACPI support, and core functionality, but do not contain an exploit PoC.
Description
In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only after we are done using it. This patch just moves the put_device() down a bit to avoid the use after free. [wsa: added comment to the code, added Fixes tag]
Exploits (1)
This repository contains kernel source code files related to the I2C subsystem, specifically focusing on the vulnerable components associated with CVE-2019-25162. The files include implementations for I2C board info registration, ACPI support, and core functionality, but do not contain an exploit PoC.
References (8)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H