CVE-2019-13272: Linux Kernel Improper Privilege Management Vulnerability

CVE-2019-13272 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2021-12-10

The Linux kernel mishandles credential recording in ptrace_link within kernel/ptrace.c, leading to an improper privilege management vulnerability. Local attackers can exploit this via specific parent-child process relationships, such as using Polkit's pkexec helper with PTRACE_TRACEME, to escalate privileges to root.

Technologies: Linux Kernel. Vendors: Linux.

Quick answers

Is CVE-2019-13272 exploited in the wild?
Yes. CVE-2019-13272 is known to be exploited in the wild, first recorded on 10 December 2021. Treat it as urgent.
How severe is CVE-2019-13272?
Critical severity, with a CVSS score of 7.8, published 10 December 2021.
Which products and versions are affected?
Linux Linux Kernel before 5.1.17.
Is there a fix for CVE-2019-13272?
A patch was published on 2019-07-10: Fixed in Linux kernel version 5.1.17 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2019-13272 attacked?
It is attacked with local access, in an operating system.
Am I affected by CVE-2019-13272?
Check whether you run Linux Kernel. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

  • Linux Linux Kernel before 5.1.17

Timeline

  • 2019-07-10: patched: Fixed in Linux kernel version 5.1.17
  • 2021-12-10: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2021-12-10: disclosed

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.