PT-2019-1435 · Linux+5 · Linux Kernel+5
Published
2017-03-17
·
Updated
2021-06-02
·
CVE-2019-8980
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 4.20.11
Description
The issue is related to a memory leak in the kernel read file function, specifically in the fs/exec.c file of the Linux kernel. This leak occurs when handling vfs read failures, allowing attackers to cause a denial of service by consuming memory. The exploitation of this issue can be achieved by triggering vfs read failures, potentially through specially crafted files.
Recommendations
For Linux kernel versions through 4.20.11, consider updating to a version that includes a fix for the memory leak in the kernel read file function to prevent denial of service attacks.
As a temporary workaround, consider restricting access to sensitive files and implementing memory usage monitoring to minimize the risk of exploitation.
Exploit
Fix
DoS
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu