CVE-2019-19807

unknown

Published — · Modified —

CVSS v3

—

CVSS v2

—

VIR risk

—

Description

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to snd_timer_open and snd_timer_close_locked. The timeri variable was originally intended to be for a newly created timer instance, but was used for a different purpose after refactoring.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2019-19807

OS impact

OS	Version	Status	Fixed in
debian	bookworm	fixed	`5.3.15-1`
debian	bullseye	fixed	`5.3.15-1`
debian	forky	fixed	`5.3.15-1`
debian	sid	fixed	`5.3.15-1`
debian	trixie	fixed	`5.3.15-1`

References

https://security-tracker.debian.org/tracker/CVE-2019-19807

Verify integrity in audit chain (admin only). AS-IS.