Aller au contenu
en Se connecter
7.1 Élevée

CVE-2019-15794 Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3…

Description

Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However, the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which will fput() vm_file, leading to a refcount underflow.

Produits et versions touchés

Produit Versions touchées Corrigé en
Linux kernel 5.3 premières → < 5.3.0-24.26 5.3.0-24.26
Linux kernel 5.0 premières → < 5.0.0-37.40 5.0.0-37.40

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Linux kernel

Les 3 CVE de Linux kernel →
CVE-2021-3492 Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults… 8.8 Élevée CVE-2021-3493 Linux Kernel Privilege Escalation Vulnerability 8.8 Élevée
Suivre cette CVE