In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-13233.json"
[
{
"signature_type": "Line",
"target": {
"file": "arch/x86/lib/insn-eval.c"
},
"deprecated": false,
"id": "CVE-2019-13233-04285872",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"257547021345781543911582858083845920262",
"262114458094705284570316580656509807937",
"248628048965416383870675665557831562086",
"116847855755970527605017845416673370124",
"223132169358616432837707609411097900374",
"262102827288255878666863242020626544581",
"329172197418667399745436593347965561692",
"327040020219970118697732074687581153040",
"147641138134951216489171007518500838537",
"274403262244985836769490080057126038384",
"221743552886962188036069322637895588056",
"101394214281502045288269266499024029895",
"332061221473599737133533639338857460443",
"230286628641964619955427530358018922471",
"303430004753645996253127956536248251886",
"244031600084772663346973968958245333698",
"164875471342846344143016876209999095162",
"144475629018512017649240298680698954854",
"195214049976828979477105944732857117250",
"123706012210033952437909699834041436448",
"188505110881408568599521433115394022352",
"267563799502030395435875124559073835486",
"318046239982649960754794591503155873893",
"311203557434994063385798327229829621513",
"2070088941257851785581799605415039062",
"182910838217827864343775814723674848456",
"259013432005879477778005697207133011395",
"55131602200252591674430653419643743450",
"31927137783430039251717916169760115167",
"273482382502769056046289163711231430710",
"41851782113708802293898216879151376066",
"83911605520136842465468643441864093710",
"249947661576625889168415785718751986646",
"127490671059236354793285353424023307410",
"293187347656808930434741571154978034240",
"23054708007535215243565507047693135081",
"328071865755164345755809737093440468802",
"64144654337602971331169280636661596128",
"148907084032903655511706531051758834401",
"319812739785542319280222342604077941856",
"271022508206733989277437125844798110359",
"74007306734390383860638086305650455896",
"32432729183424614794304298265942444898",
"154623276897191629989342150650376919587",
"87785512471515070923560878939400402926",
"4379586435298481835012005584345840787",
"197227914598633442083070845574419009906",
"18484583604061173591153497594860658461",
"90633939745270974626411508458925287505",
"134262038469584158372123940492599914976",
"84959629912077994849074598536939085300",
"5603691364760675493727712701486623744",
"331902070645647636804066519992864204870",
"275185845981243923686977951145029836646",
"57479052011553429809771434796878498312",
"313252946152343454543138017409959413083",
"36868556553246346463218347035878806171",
"52770510447778010126757614212170786014"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
},
{
"signature_type": "Function",
"target": {
"file": "arch/x86/lib/insn-eval.c",
"function": "insn_get_code_seg_params"
},
"deprecated": false,
"id": "CVE-2019-13233-3430b616",
"signature_version": "v1",
"digest": {
"function_hash": "302642847533031459011707871883388540844",
"length": 497.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
},
{
"signature_type": "Function",
"target": {
"file": "arch/x86/lib/insn-eval.c",
"function": "get_desc"
},
"deprecated": false,
"id": "CVE-2019-13233-68f50ad6",
"signature_version": "v1",
"digest": {
"function_hash": "118586451894569769589984897317583579734",
"length": 649.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
},
{
"signature_type": "Function",
"target": {
"file": "arch/x86/lib/insn-eval.c",
"function": "get_seg_limit"
},
"deprecated": false,
"id": "CVE-2019-13233-f05a2d9c",
"signature_version": "v1",
"digest": {
"function_hash": "148695476118254264433816917893003841772",
"length": 393.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
},
{
"signature_type": "Function",
"target": {
"file": "arch/x86/lib/insn-eval.c",
"function": "insn_get_seg_base"
},
"deprecated": false,
"id": "CVE-2019-13233-f1aa438d",
"signature_version": "v1",
"digest": {
"function_hash": "34612596023357058840900616206644949335",
"length": 542.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-13233.json"
[
{
"signature_type": "Function",
"target": {
"file": "arch/x86/lib/insn-eval.c",
"function": "insn_get_seg_base"
},
"deprecated": false,
"id": "CVE-2019-13233-2e4caecd",
"signature_version": "v1",
"digest": {
"function_hash": "34612596023357058840900616206644949335",
"length": 542.0
},
"source": "https://github.com/torvalds/linux/commit/de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
},
{
"signature_type": "Function",
"target": {
"file": "arch/x86/lib/insn-eval.c",
"function": "get_seg_limit"
},
"deprecated": false,
"id": "CVE-2019-13233-4448a82d",
"signature_version": "v1",
"digest": {
"function_hash": "148695476118254264433816917893003841772",
"length": 393.0
},
"source": "https://github.com/torvalds/linux/commit/de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
},
{
"signature_type": "Function",
"target": {
"file": "arch/x86/lib/insn-eval.c",
"function": "get_desc"
},
"deprecated": false,
"id": "CVE-2019-13233-45b76da1",
"signature_version": "v1",
"digest": {
"function_hash": "118586451894569769589984897317583579734",
"length": 649.0
},
"source": "https://github.com/torvalds/linux/commit/de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
},
{
"signature_type": "Function",
"target": {
"file": "arch/x86/lib/insn-eval.c",
"function": "insn_get_code_seg_params"
},
"deprecated": false,
"id": "CVE-2019-13233-9c630c84",
"signature_version": "v1",
"digest": {
"function_hash": "302642847533031459011707871883388540844",
"length": 497.0
},
"source": "https://github.com/torvalds/linux/commit/de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
},
{
"signature_type": "Line",
"target": {
"file": "arch/x86/lib/insn-eval.c"
},
"deprecated": false,
"id": "CVE-2019-13233-fe377b21",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"257547021345781543911582858083845920262",
"262114458094705284570316580656509807937",
"248628048965416383870675665557831562086",
"116847855755970527605017845416673370124",
"223132169358616432837707609411097900374",
"262102827288255878666863242020626544581",
"329172197418667399745436593347965561692",
"327040020219970118697732074687581153040",
"147641138134951216489171007518500838537",
"274403262244985836769490080057126038384",
"221743552886962188036069322637895588056",
"101394214281502045288269266499024029895",
"332061221473599737133533639338857460443",
"230286628641964619955427530358018922471",
"303430004753645996253127956536248251886",
"244031600084772663346973968958245333698",
"164875471342846344143016876209999095162",
"144475629018512017649240298680698954854",
"195214049976828979477105944732857117250",
"123706012210033952437909699834041436448",
"188505110881408568599521433115394022352",
"267563799502030395435875124559073835486",
"318046239982649960754794591503155873893",
"311203557434994063385798327229829621513",
"2070088941257851785581799605415039062",
"182910838217827864343775814723674848456",
"259013432005879477778005697207133011395",
"55131602200252591674430653419643743450",
"31927137783430039251717916169760115167",
"273482382502769056046289163711231430710",
"41851782113708802293898216879151376066",
"83911605520136842465468643441864093710",
"249947661576625889168415785718751986646",
"127490671059236354793285353424023307410",
"293187347656808930434741571154978034240",
"23054708007535215243565507047693135081",
"328071865755164345755809737093440468802",
"64144654337602971331169280636661596128",
"148907084032903655511706531051758834401",
"319812739785542319280222342604077941856",
"271022508206733989277437125844798110359",
"74007306734390383860638086305650455896",
"32432729183424614794304298265942444898",
"154623276897191629989342150650376919587",
"87785512471515070923560878939400402926",
"4379586435298481835012005584345840787",
"197227914598633442083070845574419009906",
"18484583604061173591153497594860658461",
"90633939745270974626411508458925287505",
"134262038469584158372123940492599914976",
"84959629912077994849074598536939085300",
"5603691364760675493727712701486623744",
"331902070645647636804066519992864204870",
"275185845981243923686977951145029836646",
"57479052011553429809771434796878498312",
"313252946152343454543138017409959413083",
"36868556553246346463218347035878806171",
"52770510447778010126757614212170786014"
]
},
"source": "https://github.com/torvalds/linux/commit/de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
}
]