The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | Apr 27, 2020 | Apr 29, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Apr 29, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Apr 29, 2019 |
| Debian | — | Upgrade linux | May 29, 2019 | Apr 29, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debug | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-sourceUpgrade python-perfUpgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perf | Mar 12, 2020 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 15, 2019 | Apr 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 29, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 7, 2019 | Apr 29, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-azure-base | Jul 14, 2019 | Apr 29, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-159-powerpc-e500mcUpgrade linux-image-4.4.0-1090-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-5.0.0-21-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-4.4.0-1122-snapdragonUpgrade linux-image-4.4.0-159-genericUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1011-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-159-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-1118-raspi2Upgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-5.0.0-1012-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.4.0-159-powerpc64-smpUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-23-genericUpgrade linux-image-genericUpgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.4.0-1054-kvmUpgrade linux-image-4.4.0-159-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04 | Jul 24, 2019 | Apr 29, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub