CVE-2019-13233

Description

In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.

Risk Information

Base Score
7.0
MODERATE
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.054

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Security Guardium 11.1Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.2Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.0Windows
Linux kernel (USN-4094-1) linux-image-gcp_4.15.0.1040.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gcp_4.15.0.1040.54_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gke_4.15.0.1040.43_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gke_4.15.0.1040.54_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-kvm_4.15.0.1042.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oem_4.15.0.58.79_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oem_4.15.0.1050.54_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-azure_4.15.0.1055.58_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oracle_4.15.0.1021.15_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oracle_4.15.0.1021.24_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-generic_4.15.0.58.60_i386.debLinux
Linux kernel (USN-4094-1) linux-image-generic_4.15.0.58.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-virtual_4.15.0.58.60_i386.debLinux
Linux kernel (USN-4094-1) linux-image-virtual_4.15.0.58.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gke-4.15_4.15.0.1040.43_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency_4.15.0.58.60_i386.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency_4.15.0.58.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gcp_4.15.0-1040.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gcp_4.15.0-1040.42~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gke_4.15.0-1040.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1042-kvm_4.15.0-1042.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1050-oem_4.15.0-1050.57_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1055-azure_4.15.0-1055.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64~16.04.1_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-generic-hwe-16.04_4.15.0.58.79_i386.debLinux
Linux kernel (USN-4094-1) linux-image-generic-hwe-16.04_4.15.0.58.79_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-virtual-hwe-16.04_4.15.0.58.79_i386.debLinux
Linux kernel (USN-4094-1) linux-image-virtual-hwe-16.04_4.15.0.58.79_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1021-oracle_4.15.0-1021.23_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1021-oracle_4.15.0-1021.23~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64~16.04.1_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency-hwe-16.04_4.15.0.58.79_i386.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency-hwe-16.04_4.15.0.58.79_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws_4.15.0.1047.46_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws-hwe_4.15.0.1047.47_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49~16.04.1_amd64.debLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update bpftool-3.10.0-1127.el7.x86_64.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-3.10.0-1127.el7.x86_64.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-abi-whitelists-3.10.0-1127.el7.noarch.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-3.10.0-1127.el7.x86_64.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-devel-3.10.0-1127.el7.x86_64.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-devel-3.10.0-1127.el7.x86_64.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-doc-3.10.0-1127.el7.noarch.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-headers-3.10.0-1127.el7.x86_64.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-3.10.0-1127.el7.x86_64.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-3.10.0-1127.el7.x86_64.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-devel-3.10.0-1127.el7.x86_64.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update perf-3.10.0-1127.el7.x86_64.rpmLinux
(RHSA-2020:1016) kernel security, bug fix, and enhancement update python-perf-3.10.0-1127.el7.x86_64.rpmLinux
(CESA-2020:1016) kernel security, bug fix, and enhancement update bpftool-3.10.0-1127.el7.x86_64.rpmLinux
(CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-3.10.0-1127.el7.x86_64.rpmLinux
(CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-3.10.0-1127.el7.x86_64.rpmLinux
(CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-devel-3.10.0-1127.el7.x86_64.rpmLinux
(CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-devel-3.10.0-1127.el7.x86_64.rpmLinux
(CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-headers-3.10.0-1127.el7.x86_64.rpmLinux
(CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-3.10.0-1127.el7.x86_64.rpmLinux
(CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-3.10.0-1127.el7.x86_64.rpmLinux
(CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-devel-3.10.0-1127.el7.x86_64.rpmLinux
(CESA-2020:1016) kernel security, bug fix, and enhancement update perf-3.10.0-1127.el7.x86_64.rpmLinux
(CESA-2020:1016) kernel security, bug fix, and enhancement update python-perf-3.10.0-1127.el7.x86_64.rpmLinux
Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability (CVE-2019-13233)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234