arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Sep 11, 2019 | Jun 25, 2019 |
| Debian | — | Upgrade linux | Aug 13, 2019 | Jun 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Jul 26, 2019 | Jun 25, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 21, 2020 | Jun 24, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 25, 2019 |
| Redhat_linux | — | Upgrade kernel | Sep 11, 2019 | Jun 25, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-default | Jul 21, 2019 | Jun 24, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.18.0-24-genericUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-5.0.0-19-genericUpgrade linux-image-generic-hwe-18.04 | Jun 24, 2019 | Jun 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub