The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade perf | Apr 27, 2020 | Apr 29, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Apr 29, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Apr 29, 2019 |
| Debian | — | Upgrade linux | May 29, 2019 | Apr 29, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debug | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-devel | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-headers | Mar 12, 2020 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 15, 2019 | Apr 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 29, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 7, 2019 | Apr 29, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-default | Jul 14, 2019 | Apr 29, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-5.0.0-23-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-60-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.4.0-159-powerpc-smpUpgrade linux-image-awsUpgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1054-kvmUpgrade linux-image-5.0.0-1012-azureUpgrade linux-image-4.4.0-159-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1118-raspi2Upgrade linux-image-5.0.0-21-genericUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-4.4.0-159-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-4.4.0-159-genericUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-gcpUpgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1090-awsUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-1122-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-4.4.0-159-powerpc-e500mc | Jul 24, 2019 | Apr 29, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub