DSA-4484: -1 linux -- security update

Published Jul 20, 2019

Updated

Jann Horn discovered that the ptrace subsystem in the Linux kernel mishandles the management of the credentials of a process that wants to create a ptrace relationship, allowing a local user to obtain root privileges under certain scenarios.

Affected Software

2 affected components

debian/linux

Event History

Jul 20, 2019

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2019-13272

Frequently Asked Questions

Who can exploit this issue?

A local user can exploit the flaw under certain scenarios to obtain root privileges. The provided information does not indicate that remote access alone is sufficient.

What access does an attacker need before exploiting it?

The attacker needs local access to the affected Debian Linux system. The issue involves creating a ptrace relationship with another process.