In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-tools | Apr 27, 2020 | Mar 5, 2019 |
| Amazon_linux | — | Upgrade kernel | Apr 1, 2019 | Mar 5, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Mar 5, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | May 1, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headers | May 30, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-tools | Apr 3, 2019 | Mar 5, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 21, 2020 | Feb 27, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 5, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 24, 2019 | Mar 5, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-default-man | Mar 20, 2019 | Mar 5, 2019 |
| Ubuntu | — | Upgrade linux-image-4.18.0-1014-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1035-oemUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-4.18.0-17-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.15.0-1035-awsUpgrade linux-image-virtualUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-3.13.0-168-genericUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1106-raspi2 | Apr 5, 2019 | Mar 5, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub