CVEvulnerability
CVE-2019-14898
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-05-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-362, CWE-667
Description
The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmget_not_zero or get_task_mm calls.
Affected configurations
• linux linux kernel 5.0.10
• redhat enterprise mrg 2.0
Related
References
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1790 Exploit, Mailing List, Patch, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14898 Issue Tracking, Third Party Advisory
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114 Mailing List, Vendor Advisory
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37 Mailing List, Vendor Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10 Mailing List, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20200608-0001/ security.netapp.com
- https://www.oracle.com/security-alerts/cpuApr2021.html www.oracle.com
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1790 Exploit, Mailing List, Patch, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14898 Issue Tracking, Third Party Advisory
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114 Mailing List, Vendor Advisory
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37 Mailing List, Vendor Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10 Mailing List, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20200608-0001/ security.netapp.com
- https://www.oracle.com/security-alerts/cpuApr2021.html www.oracle.com