The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfo | Apr 27, 2020 | Apr 29, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Apr 29, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Apr 29, 2019 |
| Debian | — | Upgrade linux | May 29, 2019 | Apr 29, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-headersUpgrade python-perf | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perf | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-sourceUpgrade python-perfUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade bpftool | Mar 12, 2020 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2019 | Apr 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 29, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 7, 2019 | Apr 29, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-obs-build | Jul 14, 2019 | Apr 29, 2019 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-1054-kvmUpgrade linux-image-4.4.0-159-powerpc64-smpUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-23-genericUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-5.0.0-1012-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-4.4.0-159-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-4.4.0-1118-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1090-awsUpgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-4.4.0-159-genericUpgrade linux-image-4.4.0-159-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-4.4.0-1122-snapdragonUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-azureUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-kvmUpgrade linux-image-4.4.0-159-powerpc-e500mcUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-gcpUpgrade linux-image-5.0.0-21-genericUpgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-powerpc64-smp | Jul 24, 2019 | Apr 29, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub