CVE-2019-3896

A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).

• CWE-416
• CWE-415

• http://www.securityfocus.com/bid/108814Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3896Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20190710-0002/
• https://support.f5.com/csp/article/K04327111
• http://www.securityfocus.com/bid/108814Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3896Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20190710-0002/
• https://support.f5.com/csp/article/K04327111

Published

Jun 19, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3890It was discovered evolution-ews before 3.31.3 does not check…8.1
• CVE-2019-3891It was discovered that a world-readable log file belonging t…7.8
• CVE-2019-3892Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-3893In Foreman it was discovered that the delete compute resourc…4.9
• CVE-2019-3894It was discovered that the ElytronManagedThread in Wildfly's…8.8
• CVE-2019-3895An access-control flaw was found in the Octavia service when…8
• CVE-2019-3897It has been discovered in redhat-certification that any unau…5.3
• CVE-2019-3898Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-3899It was found that default configuration of Heketi does not r…9.8
• CVE-2019-3900An infinite loop issue was found in the vhost_net kernel mod…7.7
• CVE-2019-3901A race condition in perf_event_open() allows local attackers…4.7
• CVE-2019-3902A flaw was found in Mercurial before 4.9. It was possible to…5.1