The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains holes), related to fs/userfaultfd.c and mm/userfaultfd.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Feb 5, 2019 | Dec 12, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 12, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perf | Mar 11, 2019 | Dec 12, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 30, 2019 | Nov 26, 2018 |
| Redhat_linux | — | Upgrade kernel | Jan 30, 2019 | Dec 12, 2018 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade gfs2-kmp-default | Jan 18, 2019 | Dec 12, 2018 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1028-gcpUpgrade linux-image-4.15.0-1030-kvmUpgrade linux-image-4.15.0-1033-awsUpgrade linux-image-oemUpgrade linux-image-4.15.0-46-snapdragonUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1034-oemUpgrade linux-image-4.18.0-16-generic-lpaeUpgrade linux-image-4.18.0-16-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-snapdragonUpgrade linux-image-4.18.0-1008-kvmUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.18.0-16-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-46-lowlatencyUpgrade linux-image-4.15.0-46-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-4.15.0-46-genericUpgrade linux-image-4.18.0-16-snapdragonUpgrade linux-image-4.18.0-1013-azureUpgrade linux-image-4.15.0-1009-oracleUpgrade linux-image-aws-hweUpgrade linux-image-4.18.0-1010-raspi2Upgrade linux-image-4.15.0-1032-raspi2Upgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1040-azureUpgrade linux-image-4.18.0-1007-gcpUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-16.04 | Mar 13, 2019 | Dec 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub