CVE-2019-9213

Description

In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.

Weakness classification

• CWE-476: NULL Pointer Dereference

Primary references

• cve@mitre.org — Patch, Vendor Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Exploit, Mailing List, Third Party Advisory
• cve@mitre.org — Mailing List, Patch, Vendor Advisory
• cve@mitre.org — Mailing List, Patch, Vendor Advisory
• cve@mitre.org — Mailing List, Patch, Vendor Advisory