In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Jul 4, 2019 |
| Debian | — | Upgrade linux | Aug 13, 2019 | Jul 4, 2019 |
| F5 Big Ip | — | — | Oct 16, 2019 | Jul 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-tools-libs | Mar 23, 2020 | Jul 4, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 4, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Jul 4, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-azure-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-default | Jul 21, 2019 | Jul 4, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1014-azureUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-oemUpgrade linux-image-5.0.0-1013-gcpUpgrade linux-image-awsUpgrade linux-image-5.0.0-25-lowlatencyUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1014-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-5.0.0-25-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-5.0.0-1014-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-25-genericUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-5.0.0-1018-snapdragonUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1013-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-58-generic | Aug 14, 2019 | Jul 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub