The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmgetnotzero or gettaskmm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/taskmmu.c, and drivers/infiniband/core/uverbsmain.c.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11599.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"line_hashes": [
"284525076960884415393097197390547487875",
"17678329056378249980397336179222317712",
"41469001988125199720197524879887661249",
"42659301987568095278972490155579547067",
"238001832764866270764093181892090957782",
"127391472079430174681083880253178370908",
"135428239869440938470747928850646406405",
"37554034761484551987236391998197494329"
],
"threshold": 0.9
},
"id": "CVE-2019-11599-026333cb",
"deprecated": false,
"target": {
"file": "drivers/infiniband/core/uverbs_main.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "33345287312960015424650182606679394234",
"length": 1303.0
},
"id": "CVE-2019-11599-11a8d168",
"deprecated": false,
"target": {
"file": "fs/userfaultfd.c",
"function": "userfaultfd_release"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "226279978442251382881410144528941104533",
"length": 924.0
},
"id": "CVE-2019-11599-12ddb824",
"deprecated": false,
"target": {
"file": "drivers/infiniband/core/uverbs_main.c",
"function": "uverbs_user_mmap_disassociate"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "261475525782975586447457928627487832261",
"length": 3168.0
},
"id": "CVE-2019-11599-1db00313",
"deprecated": false,
"target": {
"file": "fs/userfaultfd.c",
"function": "userfaultfd_register"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"line_hashes": [
"46501476529864454507688585765326013530",
"52934204266779959001707156135170423271",
"3585599787254940166723073808175482867"
],
"threshold": 0.9
},
"id": "CVE-2019-11599-44dd7ff1",
"deprecated": false,
"target": {
"file": "include/linux/sched/mm.h"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "1934564445337877381757475679679877198",
"length": 356.0
},
"id": "CVE-2019-11599-88cd9a29",
"deprecated": false,
"target": {
"file": "mm/mmap.c",
"function": "find_extend_vma"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "258178854602373037587847973186624235309",
"length": 1315.0
},
"id": "CVE-2019-11599-8a3b61e7",
"deprecated": false,
"target": {
"file": "fs/userfaultfd.c",
"function": "userfaultfd_event_wait_completion"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"line_hashes": [
"119303895097893322073097362859514190152",
"252163785828543874221272992425173501441",
"331061875188542452837635506925792622058",
"321547830841380877001012040397234299158",
"101694511771892817919117686803012970698",
"21475986020615642366693643264052470186",
"179642170592529603491806498705386085531",
"313363938016900018232077252904870700229",
"186705271107560460057335002522082972826",
"197456625338392008970713273370913878040",
"213174216396564962955609502593088550452",
"94310796810726260558622276317658601440",
"175789623924502164996639470681889403681",
"130762690443271706730192388792501490933",
"329510811742290685491434617260885946957",
"29253136026620632837980963890609211345",
"175789623924502164996639470681889403681",
"130762690443271706730192388792501490933",
"329510811742290685491434617260885946957",
"29253136026620632837980963890609211345"
],
"threshold": 0.9
},
"id": "CVE-2019-11599-8e5e1eaf",
"deprecated": false,
"target": {
"file": "fs/userfaultfd.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"line_hashes": [
"209560382899714798421197535698136215047",
"42773307282874901803623062780864927456",
"58555268937859621960549877016698224819",
"123984654394011107242694710554230759681",
"205069131708968016117349882005233187645",
"170145697112086435919392548813509027918",
"317301368394986747574273237060556243360",
"335922750144144001726573797046030738619",
"273766442856198936902335168113592826795",
"65683211988876830697926653849500391581",
"282818314624025221736926079617769859948",
"71988501432179107768881488069170507801"
],
"threshold": 0.9
},
"id": "CVE-2019-11599-96496bce",
"deprecated": false,
"target": {
"file": "mm/mmap.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"line_hashes": [
"147757796889748505997874258045762511697",
"265245873856539985521866661175906648013",
"126812530183919854187553796840614380229",
"140448163132296370596955494709394547827"
],
"threshold": 0.9
},
"id": "CVE-2019-11599-aa6d804e",
"deprecated": false,
"target": {
"file": "fs/proc/task_mmu.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "314571208599823609837669083727947275354",
"length": 440.0
},
"id": "CVE-2019-11599-e26bf176",
"deprecated": false,
"target": {
"file": "mm/mmap.c",
"function": "find_extend_vma"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "77416732509982049345784063143029622125",
"length": 1788.0
},
"id": "CVE-2019-11599-e54ebfec",
"deprecated": false,
"target": {
"file": "fs/proc/task_mmu.c",
"function": "clear_refs_write"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "2016238410952636328899000662263082746",
"length": 2229.0
},
"id": "CVE-2019-11599-f7e4413b",
"deprecated": false,
"target": {
"file": "fs/userfaultfd.c",
"function": "userfaultfd_unregister"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11599.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"line_hashes": [
"119303895097893322073097362859514190152",
"252163785828543874221272992425173501441",
"331061875188542452837635506925792622058",
"321547830841380877001012040397234299158",
"101694511771892817919117686803012970698",
"21475986020615642366693643264052470186",
"179642170592529603491806498705386085531",
"313363938016900018232077252904870700229",
"186705271107560460057335002522082972826",
"197456625338392008970713273370913878040",
"213174216396564962955609502593088550452",
"94310796810726260558622276317658601440",
"175789623924502164996639470681889403681",
"130762690443271706730192388792501490933",
"329510811742290685491434617260885946957",
"29253136026620632837980963890609211345",
"175789623924502164996639470681889403681",
"130762690443271706730192388792501490933",
"329510811742290685491434617260885946957",
"29253136026620632837980963890609211345"
],
"threshold": 0.9
},
"id": "CVE-2019-11599-14576039",
"deprecated": false,
"target": {
"file": "fs/userfaultfd.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "261475525782975586447457928627487832261",
"length": 3168.0
},
"id": "CVE-2019-11599-19603d29",
"deprecated": false,
"target": {
"file": "fs/userfaultfd.c",
"function": "userfaultfd_register"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"line_hashes": [
"147757796889748505997874258045762511697",
"265245873856539985521866661175906648013",
"126812530183919854187553796840614380229",
"140448163132296370596955494709394547827"
],
"threshold": 0.9
},
"id": "CVE-2019-11599-19b3e558",
"deprecated": false,
"target": {
"file": "fs/proc/task_mmu.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "1934564445337877381757475679679877198",
"length": 356.0
},
"id": "CVE-2019-11599-4878d579",
"deprecated": false,
"target": {
"file": "mm/mmap.c",
"function": "find_extend_vma"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "258178854602373037587847973186624235309",
"length": 1315.0
},
"id": "CVE-2019-11599-62e87095",
"deprecated": false,
"target": {
"file": "fs/userfaultfd.c",
"function": "userfaultfd_event_wait_completion"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "33345287312960015424650182606679394234",
"length": 1303.0
},
"id": "CVE-2019-11599-6cae56d1",
"deprecated": false,
"target": {
"file": "fs/userfaultfd.c",
"function": "userfaultfd_release"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "77416732509982049345784063143029622125",
"length": 1788.0
},
"id": "CVE-2019-11599-73b1973e",
"deprecated": false,
"target": {
"file": "fs/proc/task_mmu.c",
"function": "clear_refs_write"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "226279978442251382881410144528941104533",
"length": 924.0
},
"id": "CVE-2019-11599-ab4c731a",
"deprecated": false,
"target": {
"file": "drivers/infiniband/core/uverbs_main.c",
"function": "uverbs_user_mmap_disassociate"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"line_hashes": [
"284525076960884415393097197390547487875",
"17678329056378249980397336179222317712",
"41469001988125199720197524879887661249",
"42659301987568095278972490155579547067",
"238001832764866270764093181892090957782",
"127391472079430174681083880253178370908",
"135428239869440938470747928850646406405",
"37554034761484551987236391998197494329"
],
"threshold": 0.9
},
"id": "CVE-2019-11599-b1cd9a8b",
"deprecated": false,
"target": {
"file": "drivers/infiniband/core/uverbs_main.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "2016238410952636328899000662263082746",
"length": 2229.0
},
"id": "CVE-2019-11599-d1dc2af1",
"deprecated": false,
"target": {
"file": "fs/userfaultfd.c",
"function": "userfaultfd_unregister"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"line_hashes": [
"209560382899714798421197535698136215047",
"42773307282874901803623062780864927456",
"58555268937859621960549877016698224819",
"123984654394011107242694710554230759681",
"205069131708968016117349882005233187645",
"170145697112086435919392548813509027918",
"317301368394986747574273237060556243360",
"335922750144144001726573797046030738619",
"273766442856198936902335168113592826795",
"65683211988876830697926653849500391581",
"282818314624025221736926079617769859948",
"71988501432179107768881488069170507801"
],
"threshold": 0.9
},
"id": "CVE-2019-11599-dae3c31b",
"deprecated": false,
"target": {
"file": "mm/mmap.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"function_hash": "314571208599823609837669083727947275354",
"length": 440.0
},
"id": "CVE-2019-11599-e51eb472",
"deprecated": false,
"target": {
"file": "mm/mmap.c",
"function": "find_extend_vma"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/04f5866e41fb70690e28397487d8bd8eea7d712a",
"digest": {
"line_hashes": [
"46501476529864454507688585765326013530",
"52934204266779959001707156135170423271",
"3585599787254940166723073808175482867"
],
"threshold": 0.9
},
"id": "CVE-2019-11599-fee2b855",
"deprecated": false,
"target": {
"file": "include/linux/sched/mm.h"
}
}
]