In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools | Apr 27, 2020 | Mar 5, 2019 |
| Amazon_linux | — | Upgrade kernel | Apr 1, 2019 | Mar 5, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Mar 5, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debug | May 1, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel | May 30, 2019 | Mar 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-devel | Apr 3, 2019 | Mar 5, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 21, 2020 | Feb 27, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 5, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 24, 2019 | Mar 5, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-obs-build | Mar 20, 2019 | Mar 5, 2019 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.15.0-1035-awsUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-168-genericUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-4.18.0-1012-awsUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-kvmUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-smp | Apr 5, 2019 | Mar 5, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub