The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfo | Apr 27, 2020 | Apr 29, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Apr 29, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Apr 29, 2019 |
| Debian | — | Upgrade linux | May 29, 2019 | Apr 29, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perf | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-devel | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-tools | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-sourceUpgrade python-perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade python3-perf | Mar 12, 2020 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2019 | Apr 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 29, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 7, 2019 | Apr 29, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-obs-build | Jul 14, 2019 | Apr 29, 2019 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1090-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-4.4.0-159-powerpc-e500mcUpgrade linux-image-4.4.0-159-genericUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1122-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-4.4.0-1118-raspi2Upgrade linux-image-5.0.0-21-genericUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-4.4.0-159-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-4.4.0-159-powerpc-smpUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-5.0.0-1012-azureUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-genericUpgrade linux-image-4.4.0-1054-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-23-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-4.4.0-159-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-powerpc-e500mc | Jul 24, 2019 | Apr 29, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub