In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel | Apr 27, 2020 | Mar 5, 2019 |
| Amazon_linux | — | Upgrade kernel | Apr 1, 2019 | Mar 5, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Mar 5, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel | May 1, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libs | May 30, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel | Apr 3, 2019 | Mar 5, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 21, 2020 | Feb 27, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 5, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 24, 2019 | Mar 5, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-extra | Mar 20, 2019 | Mar 5, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-oemUpgrade linux-image-kvmUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-awsUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-4.18.0-17-genericUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-145-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-3.13.0-168-genericUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-4.15.0-1035-aws | Apr 5, 2019 | Mar 5, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub