In the Linux kernel prior to 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
linux linux kernel |
||
debian debian linux 8.0 |
||
debian debian linux 9.0 |
||
debian debian linux 10.0 |
||
fedoraproject fedora 29 |
||
canonical ubuntu linux 16.04 |
||
canonical ubuntu linux 18.04 |
||
canonical ubuntu linux 19.04 |
||
redhat enterprise linux 7.0 |
||
redhat enterprise linux 8.0 |
||
redhat enterprise linux for arm 64 7.0 aarch64 |
||
redhat enterprise linux for ibm z systems 7.0 s390x |
||
redhat enterprise linux for real time 8 |
||
redhat enterprise linux for real time for nfv 8.0 |
||
redhat enterprise linux for real time for nfv tus 8.2 |
||
redhat enterprise linux for real time for nfv tus 8.4 |
||
redhat enterprise linux for real time for nfv tus 8.6 |
||
redhat enterprise linux for real time for nfv tus 8.8 |
||
redhat enterprise linux for real time tus 8.2 |
||
redhat enterprise linux for real time tus 8.4 |
||
redhat enterprise linux for real time tus 8.6 |
||
redhat enterprise linux for real time tus 8.8 |
||
netapp aff a700s firmware - |
||
netapp h410c firmware - |
||
netapp h610s firmware - |
||
netapp active iq unified manager - |
||
netapp e-series performance analyzer - |
||
netapp e-series santricity os controller |
||
netapp hci management node - |
||
netapp service processor - |
||
netapp solidfire - |
||
netapp steelstore cloud integrated storage - |
||
netapp hci compute node - |