In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Jul 4, 2019 |
| Debian | — | Upgrade linux | Aug 13, 2019 | Jul 4, 2019 |
| F5 Big Ip | — | — | Oct 16, 2019 | Jul 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-sourceUpgrade kernel-headersUpgrade python3-perfUpgrade kernel | Mar 23, 2020 | Jul 4, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 4, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Jul 4, 2019 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade dlm-kmp-default | Jul 21, 2019 | Jul 4, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-58-genericUpgrade linux-image-5.0.0-25-generic-lpaeUpgrade linux-image-5.0.0-1014-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-azureUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-25-genericUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-5.0.0-1018-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1050-oemUpgrade linux-image-5.0.0-1013-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1055-azureUpgrade linux-image-gkeUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1014-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1014-raspi2Upgrade linux-image-5.0.0-1013-gcpUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-25-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-oracle | Aug 14, 2019 | Jul 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub