Tracker / CVE-2019-9213
CVE-2019-9213
Medium 5.5
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
Affected products and versions
| canonical | ubuntu_linux |
|---|---|
| debian | debian_linux |
| linux | linux_kernel · 4.14 → 4.14.105 |
| linux | linux_kernel · 4.19 → 4.19.27 |
| linux | linux_kernel · 4.20 → 4.20.14 |
| linux | linux_kernel · 4.9 → 4.9.162 |
| opensuse | leap |
| redhat | enterprise_linux |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.