What’s Vulnerable › Vulnerabilities
CVE-2019-11486
- Severity: high (CVSS 7.0 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-04-23 · updated 2026-06-17
- Weakness: CWE-362
Description
The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions.
Affected products
- Debian Linux: 9.0
- Linux kernel: before 3.16.66; from 3.17 before 3.18.139; from 3.19 before 4.4.179; from 4.5 before 4.9.169; from 4.10 before 4.14.112; from 4.15 before 4.19.35 — fixed in 3.16.66, 3.18.139, 4.14.112, 4.19.35, 4.4.179, 4.9.169
- NetApp Active Iq: all versions
- NetApp Hci Management Node: all versions
- NetApp Snapprotect: all versions
- NetApp Solidfire: all versions
- NetApp Storage Replication Adapter For Clustered Data Ontap: 9.7
- NetApp Vasa Provider For Clustered Data Ontap: 9.7
- NetApp Virtual Storage Console: 9.7
- openSUSE Leap: 15.1, 42.3
How to fix
Upgrade to a fixed version: Linux kernel 3.16.66, 3.18.139, 4.14.112, 4.19.35. Check the vendor advisory for mitigations.
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html
- http://www.openwall.com/lists/oss-security/2019/04/29/1
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.112
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.35
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.169
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c7084edc3f6d67750f50d4183134c4fb5712a5c8
- https://github.com/torvalds/linux/commit/c7084edc3f6d67750f50d4183134c4fb5712a5c8
- https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html
- https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html
Get alerted when CVE-2019-11486 or the next vulnerability affects your stack