CVE-2019-3896

CVE-2019-3896 describes a double-free vulnerability in the Linux kernel's idr_remove_all() function, affecting various Linux distributions including Red Hat Enterprise Linux. This flaw carries a high CVSS score of 7.8, indicating that a local, unprivileged attacker could exploit it to achieve privilege escalation or cause a system crash, leading to a denial of service. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. The vulnerability is not listed in CISA's KEV catalog.