Use After Free in Linux Kernel
CVE-2019-5525
VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.
Vulnerability class: Use-After-Free
EPSS: 0.004 (36.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Linux Linux_kernel
- Vmware Workstation — versions VMware Workstation (15.x before 15.1.0)
- Vmware Workstation
Weakness classification (CWE)
References
- security@vmware.com (x_refsource_CONFIRM, Vendor Advisory)
- security@vmware.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2019-5525?
- CVE-2019-5525 is a high-severity vulnerability in Linux Kernel, classified under Use After Free. CVSS score: 8.8/10. Published 2019-06-06.
- How severe is CVE-2019-5525?
- High severity. CVSS v3 base score is 8.8 out of 10.