CVE-2019-20172

Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows…

published December 31, 2019

CVSS
—
EPSS
0%
Percentile
40.1
In the wild
Unconfirmed
What it is

Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00475 · 40.1th percentile
Published
2019-12-31T02:50Z
EPSS history
Timeline
  • 31 DEC 02:50Z
    Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows…
    cvelistv5