VDB

CVE-2019-3901

CVE-2019-3901 PUBLISHED

A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the ptrace_may_access() call, it is possible for the specified target task to perform an execve() syscall with setuid execution before perf_event_alloc() actually attaches to it, allowing an attacker to bypass the ptrace_may_access() check and the perf_event_exit_task(current) call that is performed in install_exec_creds() during privileged execve() calls. This issue affects kernel versions before 4.8.

EPSS 0.06% · 19.5th percentile

Risk Scores

EPSS Score
0.06%
19.5th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSlinux-raspi-realtime0, 6.8.0-2019.20
Ubuntu:Pro:14.04:LTSlinux3.13.0-70.113, 3.13.0-73.116, 3.13.0-74.118
Ubuntu:14.04:LTSlinux-lts-xenial4.4.0-22.40~14.04.1, 4.4.0-22.39~14.04.1, 4.4.0-21.37~14.04.1
Ubuntu:24.04:LTSlinux-hwe-6.110, 6.11.0-17.17~24.04.2, 6.11.0-19.19~24.04.1
Ubuntu:22.04:LTSlinux-riscv5.15.0-1015.17, 5.15.0-1016.18, 5.15.0-1014.16
Ubuntu:20.04:LTSlinux-raspi25.3.0-1017.19, 5.3.0-1015.17, 5.3.0-1014.16
Ubuntu:16.04:LTSlinux4.4.0-2.16, 4.3.0-5.16, 4.3.0-2.11
Ubuntu:16.04:LTSlinux-raspi24.4.0-1012.16, 4.4.0-1010.12, 0
Ubuntu:22.04:LTSlinux-intel-iot-realtime5.15.0-1073.75, 0
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1013.13~24.04.1, 6.11.0-1016.16~24.04.1, 6.11.0-1014.14~24.04.1
Ubuntu:16.04:LTSlinux-snapdragon4.4.0-1013.15, 0, 4.4.0-1013.14
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1012.12~24.04.1, *, *
Ubuntu:22.04:LTSlinux-realtime0, 5.15.0-1032.35
Ubuntu:Pro:20.04:LTSlinux-azure-fde-5.155.15.0-1094.103~20.04.1.1, 5.15.0-1096.105~20.04.1.1, 5.15.0-1097.106~20.04.1.1
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1013.14~24.04.1, 0, 6.11.0-1009.10~24.04.1
Ubuntu:20.04:LTSlinux-gkeop-5.15*, *, *
Ubuntu:20.04:LTSlinux-gkeop5.4.0-1048.51, 5.4.0-1018.19, 5.4.0-1013.14
Ubuntu:20.04:LTSlinux-riscv5.4.0-34.38, 0, 5.4.0-39.44
Ubuntu:20.04:LTSlinux-gke5.4.0-1084.90, 5.4.0-1086.93, 5.4.0-1087.94
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1072.75+cvm1.1, 5.4.0-1070.73+cvm1.1, 5.4.0-1068.71+cvm1.1

Exploit Intelligence

Timeline

  • Apr 22, 2019 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›