CVE-2019-11191
- State
- Published
- Severity
- Not scored
- Published
- Apr 11, 2019
- Updated
- Aug 4, 2024
- Reserved
- Apr 11, 2019
Description
The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users to bypass ASLR on setuid a.out programs (if any exist) because install_exec_creds() is called too late in load_aout_binary() in fs/binfmt_aout.c, and thus the ptrace_may_access() check has a race condition when reading /proc/pid/stat. NOTE: the software maintainer disputes that this is a vulnerability because ASLR for a.out format executables has never been supported
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://www.openwall.com/lists/oss-security/2019/04/03/4
- https://www.openwall.com/lists/oss-security/2019/04/03/4/1
- 107887vdb-entry
- [oss-security] 20190418 Re: Linux kernel < 4.8 local generic ASLR - another CVE-IDmailing-list
- [oss-security] 20190522 Re: Linux kernel < 4.8 local generic ASLR - another CVE-IDmailing-list
- USN-4007-2vendor-advisory
- USN-4008-1vendor-advisory
- USN-4006-1vendor-advisory
- USN-4006-2vendor-advisory
- USN-4007-1vendor-advisory
- USN-4008-3vendor-advisory
- openSUSE-SU-2019:1570vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.