REDHAT-BUG-1831399: Medium severity red hat kernel-devel vulnerability
A flaw was found in the Linux kernel implementation of userspace core dumps. This flaw allows anyone with access to core dumps to see a small amount of private kernel data about the current running kernels internal state which could be used to further allow an attack to more reliably execute. This information could be user processes or kernel state from previous executions.
References: https://github.com/google/kmsan/issues/76 https://twitter.com/grsecurity/status/1252558055629299712 https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1831399?
REDHAT-BUG-1831399 is considered a serious vulnerability that can expose sensitive kernel information.
How do I fix REDHAT-BUG-1831399?
To fix REDHAT-BUG-1831399, you should update your Linux kernel to the latest version provided by your distribution.
Who is affected by REDHAT-BUG-1831399?
REDHAT-BUG-1831399 affects all users of the Linux kernel that allow access to core dumps.
What are the potential impacts of REDHAT-BUG-1831399?
The potential impacts of REDHAT-BUG-1831399 include unauthorized access to sensitive kernel data that could facilitate further attacks.
Is there a workaround for REDHAT-BUG-1831399?
A recommended workaround for REDHAT-BUG-1831399 is to restrict access to core dump files until an update can be applied.