In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Jul 4, 2019 |
| Debian | — | Upgrade linux | Aug 13, 2019 | Jul 4, 2019 |
| F5 Big Ip | — | — | Oct 16, 2019 | Jul 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-headers | Mar 23, 2020 | Jul 4, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 4, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Jul 4, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-defaultUpgrade cluster-md-kmp-default | Jul 21, 2019 | Jul 4, 2019 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-25-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1014-raspi2Upgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1014-azureUpgrade linux-image-5.0.0-1013-gcpUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-25-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-25-genericUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-5.0.0-1013-kvmUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.0.0-1018-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-5.0.0-1014-awsUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-snapdragon-hwe-18.04 | Aug 14, 2019 | Jul 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub