arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Sep 11, 2019 | Jun 25, 2019 |
| Debian | — | Upgrade linux | Aug 13, 2019 | Jun 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-devel | Jul 26, 2019 | Jun 25, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 21, 2020 | Jun 24, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 25, 2019 |
| Redhat_linux | — | Upgrade kernel | Sep 11, 2019 | Jun 25, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade cluster-md-kmp-default | Jul 21, 2019 | Jun 24, 2019 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-powerpc64-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.18.0-24-genericUpgrade linux-image-genericUpgrade linux-image-5.0.0-19-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-18.04 | Jun 24, 2019 | Jun 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub