The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo | Apr 27, 2020 | Apr 29, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Apr 29, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Apr 29, 2019 |
| Debian | — | Upgrade linux | May 29, 2019 | Apr 29, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perf | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-source | Mar 12, 2020 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2019 | Apr 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 29, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 7, 2019 | Apr 29, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-docs | Jul 14, 2019 | Apr 29, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-21-genericUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.4.0-159-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-1090-awsUpgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-4.4.0-1122-snapdragonUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.4.0-159-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-4.4.0-159-lowlatencyUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1118-raspi2Upgrade linux-image-4.4.0-159-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-5.0.0-1012-azureUpgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-60-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-159-powerpc-smpUpgrade linux-image-4.4.0-1054-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-5.0.0-23-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-virtual | Jul 24, 2019 | Apr 29, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub