CVE-2019-11191: Race Condition
DISPUTED The Linux kernel through 5.0.7, when CONFIGIA32AOUT is enabled and ia32aout is loaded, allows local users to bypass ASLR on setuid a.out programs (if any exist) because installexeccreds() is called too late in loadaoutbinary() in fs/binfmtaout.c, and thus the ptracemayaccess() check has a race condition when reading /proc/pid/stat. NOTE: the software maintainer disputes that this is a vulnerability because ASLR for a.out format executables has never been supported.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11191?
CVE-2019-11191 is considered a medium severity vulnerability due to its potential to allow local user access to bypass ASLR protections.
How do I fix CVE-2019-11191?
To mitigate CVE-2019-11191, upgrade the Linux kernel to a version higher than 5.0.7 or implement security measures that restrict the use of setuid a.out programs.
What systems are affected by CVE-2019-11191?
CVE-2019-11191 affects Linux kernels from version 5.0 up to and including 5.0.7 when configured with CONFIG_IA32_AOUT.
What is ASLR and how does CVE-2019-11191 affect it?
Address Space Layout Randomization (ASLR) is a security method for preventing exploitation of memory corruption vulnerabilities, and CVE-2019-11191 allows local users to bypass ASLR in certain conditions.
Are there any known exploits for CVE-2019-11191?
As of now, there have been no widely reported active exploits for CVE-2019-11191, but the potential for local privilege escalation exists.