CVE-2019-13272

Fixed in a distro release ExploitedEPSS 52%CVSS 7.8

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.

Published 2019-07-17 · In CISA KEV since 2021-12-10 · CVE record · OSV

Products: linux_kernel, debian_linux, fedoraproject fedora, canonical ubuntu_linux, redhat enterprise_linux, redhat enterprise_linux_for_arm_64, redhat enterprise_linux_for_ibm_z_systems, redhat enterprise_linux_for_real_time, redhat enterprise_linux_for_real_time_for_nfv, redhat enterprise_linux_for_real_time_for_nfv_tus, redhat enterprise_linux_for_real_time_tus, netapp aff_a700s_firmware, netapp h410c_firmware, netapp h610s_firmware, netapp active_iq_unified_manager, netapp e-series_performance_analyzer, netapp e-series_santricity_os_controller, netapp hci_management_node, netapp service_processor, netapp solidfire, netapp steelstore_cloud_integrated_storage

Distro releases