In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Jul 4, 2019 |
| Debian | — | Upgrade linux | Aug 13, 2019 | Jul 4, 2019 |
| F5 Big Ip | — | — | Oct 16, 2019 | Jul 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-sourceUpgrade kernel-headersUpgrade python3-perfUpgrade kernel | Mar 23, 2020 | Jul 4, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 4, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Jul 4, 2019 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-base | Jul 21, 2019 | Jul 4, 2019 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-5.0.0-1013-kvmUpgrade linux-image-5.0.0-25-genericUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1014-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-1018-snapdragonUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-5.0.0-25-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-oracleUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-25-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-5.0.0-1014-azureUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-5.0.0-1014-raspi2Upgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-5.0.0-1013-gcp | Aug 14, 2019 | Jul 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub