In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Mar 5, 2019 |
| Amazon_linux | — | Upgrade kernel | Apr 1, 2019 | Mar 5, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Mar 5, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64 | May 1, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | May 30, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libs | Apr 3, 2019 | Mar 5, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 21, 2020 | Feb 27, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 5, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 24, 2019 | Mar 5, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-default-man | Mar 20, 2019 | Mar 5, 2019 |
| Ubuntu | — | Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-oemUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-kvmUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-genericUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-4.15.0-1035-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-3.13.0-168-genericUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-gcp | Apr 5, 2019 | Mar 5, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub