7

CVE-2019-11599: linux linux_kernel Improper Locking

Modified
AliasesUBUNTU-CVE-2019-11599DEBIAN-CVE-2019-11599
Published 29-04-2019Last modified 04-08-2024

Vulnerability summary

CVE-2019-11599 is a high (CVSS 7.0) Improper Locking vulnerability in linux linux_kernel. EPSS estimates a 0.99% chance of exploitation in the next 30 days, higher than 62.5% of scored vulnerabilities. 4 public exploits are recorded.

Priority
Prioritisepublic exploit

Public exploit (exploit-database, 30-04-2019)

Source freshness unavailable

How is this decided?
CVSS score
7.0/10
010
High · v3.1 (NVD)
EPSS score
0.99%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits4reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 30 · Duplicates 1 · Related 16
DLA-1799-1DLA-1824-1DSA-4465-1MGASA-2019-0170MGASA-2019-0171MGASA-2019-0172

Timeline

  1. 29-04-2019
    PublishedVulnerability first disclosed.
  2. 04-08-2024
    Last modifiedVulnerability information updated.

Description

The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.

CVSS metrics

5 scores · 3 sources · 3 versions

EPSS trend

Probability

0.99%

Chance of exploitation in the next 30 days

Percentile

63%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.99% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

4 found
  • referenceUnverified

    Exploit Reference (lists.debian.org)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (bugs.chromium.org)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (packetstormsecurity.com)

    Maturity: unknown

Show all 4 exploits
  • exploit-databasedoslinuxVerified

    Linux - Missing Locking Between ELF coredump code and userfaultfd VMA Modification

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu25 products
  • linux< 4.4.0-159.187 | < 4.15.0-60.67
  • linux-aws< 4.4.0-1054.58 | < 4.4.0-1090.101 | < 4.15.0-1047.49
  • linux-aws-fips< 4.15.0-2018.18 | All versions (No fix recorded)
  • linux-aws-hwe< 4.15.0-1047.49~16.04.1
  • linux-azure< 4.15.0-1059.64~14.04.1 | < 4.15.0-1056.61 | < 5.0.0-1014.14~18.04.1
Debian1 product
  • linux< 4.19.37-1
Linux1 product
  • linux_kernel≥ 2.16.12, < 3.16.66 | ≥ 3.17, < 4.4.183 | ≥ 4.5, < 4.9.188 | ≥ 4.10, < 4.14.114 | ≥ 4.15, < 4.19.37 | ≥ 4.20, < 5.0.10

3 vendors · 27 products

References

47 links
Show all 47 references