In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Jul 4, 2019 |
| Debian | — | Upgrade linux | Aug 13, 2019 | Jul 4, 2019 |
| F5 Big Ip | — | — | Oct 16, 2019 | Jul 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-sourceUpgrade python-perf | Mar 23, 2020 | Jul 4, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 4, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Jul 4, 2019 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-build | Jul 21, 2019 | Jul 4, 2019 |
| Ubuntu | — | Upgrade linux-image-gke-4.15Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-5.0.0-1013-gcpUpgrade linux-image-5.0.0-25-lowlatencyUpgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1014-azureUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-5.0.0-1014-raspi2Upgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-5.0.0-25-genericUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-5.0.0-1018-snapdragonUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1014-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1013-kvmUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1055-azureUpgrade linux-image-genericUpgrade linux-image-5.0.0-25-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1050-oem | Aug 14, 2019 | Jul 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub