CVE-2019-9213

 

Published at: - 05-03-2019 11:29

Last modified: - 12-10-2022 05:56

Total changes: - 2

Description

In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://github.com/torvalds/linux/commit/0a1d52994d440e21def1c2174932410b4f2a98a1
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.162
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.14
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.27
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.105
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1792
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0a1d52994d440e21def1c2174932410b4f2a98a1
• 46502-Exploit, Third Party Advisory, VDB Entry
• 107296-VDB Entry, Third Party Advisory
• [debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update-Mailing List, Third Party Advisory
• openSUSE-SU-2019:1085-Mailing List, Third Party Advisory
• [debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update-Mailing List, Third Party Advisory
• USN-3933-2-Third Party Advisory
• USN-3932-2-Third Party Advisory
• USN-3932-1-Third Party Advisory
• USN-3931-2-Third Party Advisory
• USN-3931-1-Third Party Advisory
• USN-3930-2-Third Party Advisory
• USN-3930-1-Third Party Advisory
• USN-3933-1-Third Party Advisory
• openSUSE-SU-2019:1193-Mailing List, Third Party Advisory
• RHSA-2019:0831-Third Party Advisory
• [debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update-Mailing List, Third Party Advisory
• RHSA-2019:1479-Third Party Advisory
• RHSA-2019:1480-Third Party Advisory
• http://packetstormsecurity.com/files/156053/Reliable-Datagram-Sockets-RDS-rds_atomic_free_op-Privilege-Escalation.html

 

Keywords

NVD

 

CVE-2019-9213

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures