The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-devel | Apr 27, 2020 | Apr 29, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Apr 29, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Apr 29, 2019 |
| Debian | — | Upgrade linux | May 29, 2019 | Apr 29, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade python-perf | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perf | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headers | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade perfUpgrade python3-perf | Mar 12, 2020 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2019 | Apr 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 29, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 7, 2019 | Apr 29, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-default-man | Jul 14, 2019 | Apr 29, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-23-genericUpgrade linux-image-virtualUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.4.0-159-powerpc64-smpUpgrade linux-image-5.0.0-1012-azureUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-159-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1054-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-159-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.0.0-21-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.4.0-1090-awsUpgrade linux-image-4.4.0-1122-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-159-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1118-raspi2Upgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-4.4.0-159-genericUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-5.0.0-23-lowlatency | Jul 24, 2019 | Apr 29, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub