In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Apr 27, 2020 | Mar 5, 2019 |
| Amazon_linux | — | Upgrade kernel | Apr 1, 2019 | Mar 5, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Mar 5, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel | May 1, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools | May 30, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Apr 3, 2019 | Mar 5, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 21, 2020 | Feb 27, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 5, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 24, 2019 | Mar 5, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-default-extra | Mar 20, 2019 | Mar 5, 2019 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-oracleUpgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-4.18.0-17-genericUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-virtualUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-4.4.0-1040-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-3.13.0-168-genericUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1035-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-generic-hwe-16.04 | Apr 5, 2019 | Mar 5, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub