CVE-2019-13272: Linux Kernel Improper Privilege Management Vulnerability
First published: Tue Jul 16 2019(Updated: )
A flaw in the kernels implementation of ptrace which could inadvertantly grant elevated permissions to an attacker who could abuse the relationship between tracer and the process being traced. The mechanism used to link the process requesting the ptrace and the process being ptraced could allow a local user to obtain root level priviledges by creating an opportunity to abuse the frequently used pattern of dropping privileges and then execve a child with reduced privileges/permissions. References: <a href="https://bugs.chromium.org/p/project-zero/issues/detail?id=1903">https://bugs.chromium.org/p/project-zero/issues/detail?id=1903</a> <a href="https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17">https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17</a> <a href="https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6994eefb0053799d2e07cd140df6c2ea106c41ee">https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6994eefb0053799d2e07cd140df6c2ea106c41ee</a> <a href="https://github.com/torvalds/linux/commit/6994eefb0053799d2e07cd140df6c2ea106c41ee">https://github.com/torvalds/linux/commit/6994eefb0053799d2e07cd140df6c2ea106c41ee</a>
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel-alt | <0:4.14.0-115.12.1.el7a | 0:4.14.0-115.12.1.el7a |
| redhat/kernel-rt | <0:4.18.0-80.7.2.rt9.154.el8_0 | 0:4.18.0-80.7.2.rt9.154.el8_0 |
| redhat/kernel | <0:4.18.0-80.7.2.el8_0 | 0:4.18.0-80.7.2.el8_0 |
| redhat/kernel | <5.1.17 | 5.1.17 |
| Linux Linux kernel | >=3.16.52<3.16.71 | |
| Linux Linux kernel | >=4.1.39<4.2 | |
| Linux Linux kernel | >=4.4.40<4.4.185 | |
| Linux Linux kernel | >=4.8.16<4.9 | |
| Linux Linux kernel | >=4.9.1<4.9.185 | |
| Linux Linux kernel | >=4.10<4.14.133 | |
| Linux Linux kernel | >=4.15<4.19.58 | |
| Linux Linux kernel | >=4.20<5.1.17 | |
| Debian Debian Linux | =8.0 | |
| Debian Debian Linux | =9.0 | |
| Debian Debian Linux | =10.0 | |
| Fedoraproject Fedora | =29 | |
| Canonical Ubuntu Linux | =16.04 | |
| Canonical Ubuntu Linux | =18.04 | |
| Canonical Ubuntu Linux | =19.04 | |
| Redhat Enterprise Linux | =7.0 | |
| Redhat Enterprise Linux | =8.0 | |
| Redhat Enterprise Linux For Real Time | =8 | |
| Netapp Aff A700s Firmware | ||
| NetApp AFF A700s | ||
| Netapp H410c Firmware | ||
| Netapp H410c | ||
| Netapp H610s Firmware | ||
| Netapp H610s | ||
| Netapp Active Iq Unified Manager Vmware Vsphere | ||
| Netapp E-series Performance Analyzer | ||
| NetApp E-Series SANtricity OS Controller | >=11.0.0<=11.60.3 | |
| Netapp Hci Management Node | ||
| NetApp Service Processor | ||
| Netapp Solidfire | ||
| Netapp Steelstore Cloud Integrated Storage | ||
| Netapp Hci Compute Node | ||
| Canonical Ubuntu Linux | =18.04 | |
| Redhat Enterprise Linux For Arm 64 | =7.0_aarch64 | |
| Redhat Enterprise Linux For Ibm Z Systems | =7.0_s390x | |
| Redhat Enterprise Linux For Real Time For Nfv | =8.0 | |
| Redhat Enterprise Linux For Real Time For Nfv Tus | =8.2 | |
| Redhat Enterprise Linux For Real Time For Nfv Tus | =8.4 | |
| Redhat Enterprise Linux For Real Time For Nfv Tus | =8.6 | |
| Redhat Enterprise Linux For Real Time For Nfv Tus | =8.8 | |
| Redhat Enterprise Linux For Real Time Tus | =8.2 | |
| Redhat Enterprise Linux For Real Time Tus | =8.4 | |
| Redhat Enterprise Linux For Real Time Tus | =8.6 | |
| Redhat Enterprise Linux For Real Time Tus | =8.8 | |
| All of | ||
| Netapp Aff A700s Firmware | ||
| NetApp AFF A700s | ||
| All of | ||
| Netapp H410c Firmware | ||
| Netapp H410c | ||
| All of | ||
| Netapp H610s Firmware | ||
| Netapp H610s | ||
| Linux kernel | ||
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.11.10-1 6.12.5-1 |
Remedy
For mitigation, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/articles/4292201
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2019-13272 https://nvd.nist.gov/vuln/detail/CVE-2019-13272
- https://bugzilla.redhat.com/show_bug.cgi?id=1730895
- https://access.redhat.com/errata/RHSA-2019:2809
- https://access.redhat.com/errata/RHSA-2019:2405
- https://access.redhat.com/errata/RHSA-2019:2411
- https://access.redhat.com/security/cve/cve-2019-13272
- https://bugzilla.suse.com/show_bug.cgi?id=1140671
- http://packetstormsecurity.com/files/153663/Linux-PTRACE_TRACEME-Broken-Permission-Object-Lifetime-Handling.html
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1903
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6994eefb0053799d2e07cd140df6c2ea106c41ee
- https://github.com/torvalds/linux/commit/6994eefb0053799d2e07cd140df6c2ea106c41ee
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGRK5LYWBJ4E4SRI4DKX367NHYSI3VOH/
- https://www.debian.org/security/2019/dsa-4484
- https://seclists.org/bugtraq/2019/Jul/30
- https://seclists.org/bugtraq/2019/Jul/33
- https://lists.debian.org/debian-lts-announce/2019/07/msg00022.html
- https://lists.debian.org/debian-lts-announce/2019/07/msg00023.html
- http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
- https://security.netapp.com/advisory/ntap-20190806-0001/
- https://usn.ubuntu.com/4093-1/
- https://usn.ubuntu.com/4094-1/
- https://usn.ubuntu.com/4095-1/
- http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html
- https://support.f5.com/csp/article/K91025336
- https://usn.ubuntu.com/4117-1/
- https://usn.ubuntu.com/4118-1/
- https://support.f5.com/csp/article/K91025336?utm_source=f5support&amp;utm_medium=RSS
- http://packetstormsecurity.com/files/154957/Linux-Polkit-pkexec-Helper-PTRACE_TRACEME-Local-Root.html
- http://packetstormsecurity.com/files/156929/Linux-PTRACE_TRACEME-Local-Root.html
- http://packetstormsecurity.com/files/165051/Linux-Kernel-5.1.x-PTRACE_TRACEME-pkexec-Local-Privilege-Escalation.html
- https://launchpad.net/bugs/cve/CVE-2019-13272
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1730897
- https://access.redhat.com/articles/4292201
- https://access.redhat.com/errata/RHBA-2019:2417
- https://support.f5.com/csp/article/K91025336?utm_source=f5support&utm_medium=RSS
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGRK5LYWBJ4E4SRI4DKX367NHYSI3VOH/
- https://support.f5.com/csp/article/K91025336?utm_source=f5support&%3Butm_medium=RSS
- https://nvd.nist.gov/vuln/detail/CVE-2019-13272
- https://git.kernel.org/linus/6994eefb0053799d2e07cd140df6c2ea106c41ee
- https://security-tracker.debian.org/tracker/CVE-2019-13272
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13272
- https://ubuntu.com/security/CVE-2019-13272
Parent vulnerabilities
(Appears in the following advisories)
- collector/redhat-cve
- agent/type
- collector/launchpad-cve
- source/Launchpad
- agent/first-publish-date
- agent/title
- agent/severity
- agent/weakness
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-13272
- agent/software-canonical-lookup
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/author
- collector/mitre-cve
- source/MITRE
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/remedy
- agent/tags
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/event
- collector/nvd-cve
- agent/last-modified-date
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- agent/trending
- package-manager/redhat
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/3.16.52
- version/linux linux kernel/4.1.39
- version/linux linux kernel/4.4.40
- version/linux linux kernel/4.8.16
- version/linux linux kernel/4.9.1
- version/linux linux kernel/4.10
- version/linux linux kernel/4.15
- version/linux linux kernel/4.20
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/8.0
- version/debian debian linux/9.0
- version/debian debian linux/10.0
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/29
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/16.04
- version/canonical ubuntu linux/18.04
- version/canonical ubuntu linux/19.04
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/7.0
- version/redhat enterprise linux/8.0
- canonical/redhat enterprise linux for real time
- version/redhat enterprise linux for real time/8
- vendor/netapp
- canonical/netapp aff a700s firmware
- canonical/netapp aff a700s
- canonical/netapp h410c firmware
- canonical/netapp h410c
- canonical/netapp h610s firmware
- canonical/netapp h610s
- canonical/netapp active iq unified manager vmware vsphere
- canonical/netapp e-series performance analyzer
- canonical/netapp e-series santricity os controller
- version/netapp e-series santricity os controller/11.0.0
- version/netapp e-series santricity os controller/11.60.3
- canonical/netapp hci management node
- canonical/netapp service processor
- canonical/netapp solidfire
- canonical/netapp steelstore cloud integrated storage
- canonical/netapp hci compute node
- canonical/redhat enterprise linux for arm 64
- version/redhat enterprise linux for arm 64/7.0_aarch64
- canonical/redhat enterprise linux for ibm z systems
- version/redhat enterprise linux for ibm z systems/7.0_s390x
- canonical/redhat enterprise linux for real time for nfv
- version/redhat enterprise linux for real time for nfv/8.0
- canonical/redhat enterprise linux for real time for nfv tus
- version/redhat enterprise linux for real time for nfv tus/8.2
- version/redhat enterprise linux for real time for nfv tus/8.4
- version/redhat enterprise linux for real time for nfv tus/8.6
- version/redhat enterprise linux for real time for nfv tus/8.8
- canonical/redhat enterprise linux for real time tus
- version/redhat enterprise linux for real time tus/8.2
- version/redhat enterprise linux for real time tus/8.4
- version/redhat enterprise linux for real time tus/8.6
- version/redhat enterprise linux for real time tus/8.8
- canonical/linux kernel
- package-manager/debian