CVE-2019-9213: Null Pointer Dereference
In the Linux kernel before 4.20.14, expanddownwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.20.14 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade
linux kernelto a version that resolves this vulnerability.Fixed in 4.20.14
Event History
Frequently Asked Questions
What is the severity of CVE-2019-9213?
CVE-2019-9213 has a high severity level due to potential exploitation leading to kernel NULL pointer dereferences.
How do I fix CVE-2019-9213?
To mitigate CVE-2019-9213, upgrade to Linux kernel version 4.20.14 or later.
Which versions of the Linux kernel are affected by CVE-2019-9213?
CVE-2019-9213 affects Linux kernel versions prior to 4.20.14, including versions 4.9.x, 4.14.x, 4.19.x, and the 4.20.x series.
What platforms are impacted by CVE-2019-9213?
CVE-2019-9213 primarily affects non-SMAP platforms running vulnerable Linux kernel versions.
Is CVE-2019-9213 remotely exploitable?
Yes, CVE-2019-9213 can potentially be exploited remotely on affected systems, increasing the risk significantly.