The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel | Apr 27, 2020 | Apr 29, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Apr 29, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Apr 29, 2019 |
| Debian | — | Upgrade linux | May 29, 2019 | Apr 29, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perf | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Jun 27, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | May 30, 2019 | Apr 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-tools | Mar 12, 2020 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2019 | Apr 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 29, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 7, 2019 | Apr 29, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-default-extra | Jul 14, 2019 | Apr 29, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1118-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-159-genericUpgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-kvmUpgrade linux-image-5.0.0-21-genericUpgrade linux-image-4.4.0-159-powerpc-e500mcUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-4.4.0-1090-awsUpgrade linux-image-4.4.0-1122-snapdragonUpgrade linux-image-4.4.0-159-lowlatencyUpgrade linux-image-4.4.0-159-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1054-kvmUpgrade linux-image-awsUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-4.4.0-159-powerpc64-embUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.4.0-159-powerpc-smpUpgrade linux-image-5.0.0-23-genericUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-5.0.0-1012-azureUpgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-159-powerpc64-smp | Jul 24, 2019 | Apr 29, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub