{"id":"CVE-2019-10125","details":"An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.","modified":"2026-03-14T09:31:36.755129Z","published":"2019-03-27T06:29:00.327Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/107655"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190411-0003/"},{"type":"ADVISORY","url":"https://support.f5.com/csp/article/K29215970"},{"type":"FIX","url":"https://patchwork.kernel.org/patch/10828359/"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10125.json","unresolved_ranges":[{"events":[{"introduced":"4.19"},{"fixed":"4.19.38"}]},{"events":[{"introduced":"5.0"},{"fixed":"5.0.5"}]},{"events":[{"introduced":"0"},{"last_affected":"5.1-rc1"}]},{"events":[{"introduced":"9.5"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}