ZeroHour

CVE-2019-9213

PoC ×3
CVSS 3.1
5.5 medium
EPSS
6%p93
Published
()
Modified
Description

In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.

Vendors
linuxdebianredhatopensusecanonical
Products
linux kernel, debian linux, enterprise linux, leap, ubuntu linux
Weakness
CWE-476
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.