In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Jul 4, 2019 |
| Debian | — | Upgrade linux | Aug 13, 2019 | Jul 4, 2019 |
| F5 Big Ip | — | — | Oct 16, 2019 | Jul 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python3-perfUpgrade kernel | Mar 23, 2020 | Jul 4, 2019 |
| Oracle_linux | — | Upgrade kernel | Apr 9, 2020 | Jul 4, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 4, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Jul 4, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-default | Jul 21, 2019 | Jul 4, 2019 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1014-azureUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-5.0.0-25-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1013-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1014-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.15.0-58-genericUpgrade linux-image-5.0.0-25-generic-lpaeUpgrade linux-image-5.0.0-1013-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1050-oemUpgrade linux-image-5.0.0-25-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.0.0-1014-awsUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1055-azureUpgrade linux-image-azureUpgrade linux-image-5.0.0-1018-snapdragonUpgrade linux-image-4.15.0-1060-snapdragon | Aug 14, 2019 | Jul 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub