CVE-2019-14898CWE-362CWE-667

The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete

High · published May 8, 2020

CVSS v3.0
7.0
EPSS
0%
Percentile
36.9
In the wild
Unconfirmed
What it is

The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmget_not_zero or get_task_mm calls.

The record
Technical detail
CVSS v3.0
7.0 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00436 · 36.9th percentile
Weaknesses
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'); CWE-667 · Improper Locking
Published
2020-05-08T13:50Z
EPSS history
Timeline
  • 08 MAY 13:50Z
    The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete
    cvelistv5