CVE-2019-17052: Low severity Linux Linux kernel vulnerability
ax25create in net/ax25/afax25.c in the AFAX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.107-1Fixed in 7.1.8-2Fixed in 7.1.12-1 - Configuration
Ensure CAP_NET_RAW is enforced by ax25_create in net/ax25/af_ax25.c for AF_AX25 raw socket creation so unprivileged users cannot create raw sockets (fix for CID-0614e2b73768 affects Linux kernel 3.16 through 5.3.2).
Linux kernel AF_AX25 (net/ax25/af_ax25.c) Enforce CAP_NET_RAW when creating raw sockets (ax25_create) = required
Event History
Frequently Asked Questions
What is the severity of CVE-2019-17052?
CVE-2019-17052 is considered a medium severity vulnerability due to the potential for unprivileged users to create raw sockets.
How do I fix CVE-2019-17052?
To fix CVE-2019-17052, update your Linux kernel to version 5.10.223-1, 5.10.226-1 or later.
Which Linux kernel versions are affected by CVE-2019-17052?
CVE-2019-17052 affects Linux kernel versions from 3.16 up to 5.3.2.
What is the impact of CVE-2019-17052 on system security?
CVE-2019-17052 allows unprivileged users to create raw sockets, potentially leading to network abuse or system compromise.
Is CVE-2019-17052 specific to certain Linux distributions?
CVE-2019-17052 impacts multiple distributions, including Debian 8.0, Fedora 29, and several versions of Ubuntu.