{"id":"CVE-2019-25162","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: Fix a potential use after free\n\nFree the adap structure only after we are done using it.\nThis patch just moves the put_device() down a bit to avoid the\nuse after f…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: Fix a potential use after free\n\nFree the adap structure only after we are done using it.\nThis patch just moves the put_device() down a bit to avoid the\nuse after f…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 4.3.0, < 4.14.291","linux_kernel >= 4.15.0, < 4.19.256","linux_kernel >= 4.20.0, < 5.4.211","linux_kernel >= 5.5.0, < 5.10.137","linux_kernel >= 5.11.0, < 5.15.61","linux_kernel >= 5.16.0, < 5.18.18","linux_kernel >= 5.19.0, < 5.19.2"],"patched":["linux_kernel 5.19.2"],"published":"2024-02-26","updated":"2026-08-04","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-25162","references":[{"url":"https://git.kernel.org/stable/c/12b0606000d0828630c033bf0c74c748464fe87d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/23a191b132cd87f746c62f3dc27da33683d85829","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/35927d7509ab9bf41896b7e44f639504eae08af7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/81cb31756888bb062e92d2dca21cd629d77a46a9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/871a1e94929a27bf6e2cd99523865c840bbc2d87","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e4c72c06c367758a14f227c847f9d623f1994ecf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e6412ba3b6508bdf9c074d310bf4144afa6aec1a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e8e1a046cf87c8b1363e5de835114f2779e2aaf4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/12b0606000d0828630c033bf0c74c748464fe87d","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/23a191b132cd87f746c62f3dc27da33683d85829","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/35927d7509ab9bf41896b7e44f639504eae08af7","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/81cb31756888bb062e92d2dca21cd629d77a46a9","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/871a1e94929a27bf6e2cd99523865c840bbc2d87","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/e4c72c06c367758a14f227c847f9d623f1994ecf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/e6412ba3b6508bdf9c074d310bf4144afa6aec1a","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/e8e1a046cf87c8b1363e5de835114f2779e2aaf4","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.00378,"epssPercentile":0.31675,"ingestedAt":"2026-08-04T10:39:38.076Z","exploits":{"github":1,"githubRepos":["https://github.com/uthrasri/CVE-2019-25162"],"checkedAt":"2026-09-24T07:52:50.555Z"},"exploitAvailable":true,"slug":"CVE-2019-25162","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ni2c: Fix a potential use after free\n\nFree the adap structure only after we are done using it.\nThis patch just moves the put_device() down a bit to avoid the\nuse after free.\n\n[wsa: added comment to the code, added Fixes tag]\n\n## Affected\n\n- `linux_kernel >= 4.3.0, < 4.14.291`\n- `linux_kernel >= 4.15.0, < 4.19.256`\n- `linux_kernel >= 4.20.0, < 5.4.211`\n- `linux_kernel >= 5.5.0, < 5.10.137`\n- `linux_kernel >= 5.11.0, < 5.15.61`\n- `linux_kernel >= 5.16.0, < 5.18.18`\n- `linux_kernel >= 5.19.0, < 5.19.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 5.19.2`","depth":"midnight","depthScore":55,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":4674,"id":"CVE-2019-25162","ts":1788887198151,"field":"exploit_available","old":"false","new":"true"},{"seq":3557,"id":"CVE-2019-25162","ts":1788886314331,"field":"exploit_available","old":"true","new":"false"},{"seq":2411,"id":"CVE-2019-25162","ts":1788882983540,"field":"exploit_available","old":"false","new":"true"},{"seq":1440,"id":"CVE-2019-25162","ts":1788882396505,"field":"exploit_available","old":"true","new":"false"},{"seq":554,"id":"CVE-2019-25162","ts":1788881832834,"field":"exploit_available","old":"false","new":"true"}]}