CVE-2019-9213

kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms

Loading…

Severity

Important

Red Hat Product Security

5.5

CVSS 3.0

Review impact separately from score.

Published · February 27, 2019

Updated · June 28, 2026

Description

A flaw was found in mmap in the Linux kernel allowing the process to map a null page. This allows attackers to abuse this mechanism to turn null pointer dereferences into workable exploits.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Enabling selinux prevents the public exploit from working correctly.

CVSS / CWE

CVSS 3.0 · 5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference