Published: 21/02/2019 Updated: 07/11/2023

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel up to and including 4.20.11 allows malicious users to cause a denial of service (memory consumption) by triggering vfs_read failures.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 5.1
linux linux kernel
canonical ubuntu linux 18.04
canonical ubuntu linux 18.10
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04
opensuse leap 15.0
debian debian linux 8.0

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

A kernel memory leak was found in the kernel_read_file() function in the fs/execc file in the Linux kernel An attacker could use this flaw to cause a memory leak and thus a denial of service (DoS) (CVE-2019-8980) A flaw was found in mmap in the Linux kernel allowing the process to map a null page This allows attackers to abuse this mechanism t ...

Several security issues were fixed in the Linux kernel ...

A kernel memory leak was found in the kernel_read_file() function in the fs/execc file in the Linux kernel An attacker could use this flaw to cause a memory leak and thus a denial of service (DoS)(CVE-2019-8980) A flaw was found in mmap in the Linux kernel allowing the process to map a null page This allows attackers to abuse this mechanism to ...

Impact: Moderate Public Date: 2019-02-18 CWE: CWE-400 Bugzilla: 1679972: CVE-2019-8980 kernel: memory l ...

CWE-401 http://www.securityfocus.com/bid/107120 https://usn.ubuntu.com/3931-2/https://usn.ubuntu.com/3931-1/https://usn.ubuntu.com/3930-2/https://usn.ubuntu.com/3930-1/http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html https://support.f5.com/csp/article/K56480726 https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1935705.html https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1935698.html https://access.redhat.com/errata/RHSA-2020:1769 https://nvd.nist.gov https://usn.ubuntu.com/3930-1/https://alas.aws.amazon.com/ALAS-2019-1179.html

CVE-2019-8980

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect