In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perf | Apr 27, 2020 | Mar 5, 2019 |
| Amazon_linux | — | Upgrade kernel | Apr 1, 2019 | Mar 5, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Mar 5, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-headersUpgrade perfUpgrade kernel-devel | May 1, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo | May 30, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Apr 3, 2019 | Mar 5, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 21, 2020 | Feb 27, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 5, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 24, 2019 | Mar 5, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-obs-build | Mar 20, 2019 | Mar 5, 2019 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-aws-hweUpgrade linux-image-gkeUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-kvmUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-4.15.0-1035-awsUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-3.13.0-168-genericUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-genericUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-3.13.0-168-powerpc-e500 | Apr 5, 2019 | Mar 5, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub