vulnerability

Ubuntu: (Multiple Advisories) (CVE-2019-15794): Linux kernel vulnerabilities

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Dec 2, 2019
Added
Dec 3, 2019
Modified
Aug 18, 2025

Description

Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However, the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which will fput() vm_file, leading to a refcount underflow.

Solutions

ubuntu-upgrade-linux-image-5-0-0-1008-oracleubuntu-upgrade-linux-image-5-0-0-1022-awsubuntu-upgrade-linux-image-5-0-0-1023-kvmubuntu-upgrade-linux-image-5-0-0-1023-raspi2ubuntu-upgrade-linux-image-5-0-0-1026-gcpubuntu-upgrade-linux-image-5-0-0-1026-gkeubuntu-upgrade-linux-image-5-0-0-1030-oem-osp1ubuntu-upgrade-linux-image-5-0-0-37-genericubuntu-upgrade-linux-image-5-0-0-37-generic-lpaeubuntu-upgrade-linux-image-5-0-0-37-lowlatencyubuntu-upgrade-linux-image-5-3-0-1007-oracleubuntu-upgrade-linux-image-5-3-0-1008-awsubuntu-upgrade-linux-image-5-3-0-1008-kvmubuntu-upgrade-linux-image-5-3-0-1009-gcpubuntu-upgrade-linux-image-5-3-0-24-genericubuntu-upgrade-linux-image-5-3-0-24-generic-lpaeubuntu-upgrade-linux-image-5-3-0-24-lowlatencyubuntu-upgrade-linux-image-5-3-0-24-snapdragonubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-edgeubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-edgeubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-0ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-edgeubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-18-04
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.