Permissions, Privileges, and Access Controls in Linux kernel - CVE-2019-13272
Published: July 22, 2019 / Updated: June 21, 2024
Vulnerability identifier: #VU19284
CSH Severity: Low
CVSS v4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-13272
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a local user to perform unauthorized actions on a targeted system.
The vulnerability exists when recording the credentials of a process that will create a ptrace relationship in the "ptrace_link" function in the "kernel/ptrace.c" file. A local authenticated user can create a specially crafted application and escalate privileges on the system.
Affected software
Linux kernel
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Slackware Linux
Ubuntu
Fedora
kernel-alt (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
linux-kvm (Ubuntu package)
linux-snapdragon (Ubuntu package)
linux-hwe (Ubuntu package)
linux-gcp (Ubuntu package)
linux (Debian package)
linux-azure (Ubuntu package)
linux (Ubuntu package)
linux-raspi2 (Ubuntu package)
linux-oem (Ubuntu package)
linux-oracle (Ubuntu package)
linux-gke-4.15 (Ubuntu package)
linux-aws (Ubuntu package)
kernel
kernel-headers
linux-4.4.186/kernel-generic
linux-4.4.186/kernel-huge
linux-4.4.186/kernel-modules
linux-4.4.186/kernel-headers
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Slackware Linux
Ubuntu
Fedora
kernel-alt (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
linux-kvm (Ubuntu package)
linux-snapdragon (Ubuntu package)
linux-hwe (Ubuntu package)
linux-gcp (Ubuntu package)
linux (Debian package)
linux-azure (Ubuntu package)
linux (Ubuntu package)
linux-raspi2 (Ubuntu package)
linux-oem (Ubuntu package)
linux-oracle (Ubuntu package)
linux-gke-4.15 (Ubuntu package)
linux-aws (Ubuntu package)
kernel
kernel-headers
linux-4.4.186/kernel-generic
linux-4.4.186/kernel-huge
linux-4.4.186/kernel-modules
linux-4.4.186/kernel-headers
How to mitigate CVE-2019-13272
Install updates from vendor's website.
Linux kernel - update to 5.1.17
kernel-alt (Red Hat package) - update to 4.14.0-115.12.1.el7a
kernel (Red Hat package) - update to 4.18.0-80.7.2.el8_0
kernel-rt (Red Hat package) - update to 4.18.0-80.7.2.rt9.154.el8_0
linux-kvm (Ubuntu package) - addressed in versions 4.15.0-1042.42, 5.0.0-1013.14
linux-snapdragon (Ubuntu package) - addressed in versions 4.15.0-1060.66, 5.0.0-1018.19
linux-hwe (Ubuntu package) - addressed in versions 4.15.0-58.64~16.04.1, 5.0.0-25.26~18.04.1
linux-gcp (Ubuntu package) - addressed in versions 4.15.0-1040.42~16.04.1, 4.15.0-1040.42, 5.0.0-1013.13
linux (Debian package) - update to 4.9.168-1+deb9u4
linux-azure (Ubuntu package) - addressed in versions 4.15.0-1055.60, 5.0.0-1014.14~18.04.1, 5.0.0-1014.14
linux (Ubuntu package) - addressed in versions 4.15.0-58.64, 5.0.0-25.26
linux-raspi2 (Ubuntu package) - addressed in versions 4.15.0-1043.46, 5.0.0-1014.14
linux-oem (Ubuntu package) - update to 4.15.0-1050.57
linux-oracle (Ubuntu package) - addressed in versions 4.15.0-1021.23~16.04.1, 4.15.0-1021.23
linux-gke-4.15 (Ubuntu package) - update to 4.15.0-1040.42
linux-aws (Ubuntu package) - update to 5.0.0-1014.16
kernel - update to 5.1.18-200.fc29
kernel-headers - update to 5.1.18-200.fc29
linux-4.4.186/kernel-generic - update to 4.4.186
linux-4.4.186/kernel-huge - update to 4.4.186
linux-4.4.186/kernel-modules - update to 4.4.186
linux-4.4.186/kernel-headers - update to 4.4.186_smp
kernel-alt (Red Hat package) - update to 4.14.0-115.12.1.el7a
kernel (Red Hat package) - update to 4.18.0-80.7.2.el8_0
kernel-rt (Red Hat package) - update to 4.18.0-80.7.2.rt9.154.el8_0
linux-kvm (Ubuntu package) - addressed in versions 4.15.0-1042.42, 5.0.0-1013.14
linux-snapdragon (Ubuntu package) - addressed in versions 4.15.0-1060.66, 5.0.0-1018.19
linux-hwe (Ubuntu package) - addressed in versions 4.15.0-58.64~16.04.1, 5.0.0-25.26~18.04.1
linux-gcp (Ubuntu package) - addressed in versions 4.15.0-1040.42~16.04.1, 4.15.0-1040.42, 5.0.0-1013.13
linux (Debian package) - update to 4.9.168-1+deb9u4
linux-azure (Ubuntu package) - addressed in versions 4.15.0-1055.60, 5.0.0-1014.14~18.04.1, 5.0.0-1014.14
linux (Ubuntu package) - addressed in versions 4.15.0-58.64, 5.0.0-25.26
linux-raspi2 (Ubuntu package) - addressed in versions 4.15.0-1043.46, 5.0.0-1014.14
linux-oem (Ubuntu package) - update to 4.15.0-1050.57
linux-oracle (Ubuntu package) - addressed in versions 4.15.0-1021.23~16.04.1, 4.15.0-1021.23
linux-gke-4.15 (Ubuntu package) - update to 4.15.0-1040.42
linux-aws (Ubuntu package) - update to 5.0.0-1014.16
kernel - update to 5.1.18-200.fc29
kernel-headers - update to 5.1.18-200.fc29
linux-4.4.186/kernel-generic - update to 4.4.186
linux-4.4.186/kernel-huge - update to 4.4.186
linux-4.4.186/kernel-modules - update to 4.4.186
linux-4.4.186/kernel-headers - update to 4.4.186_smp
Links to Public Exploits and PoC-codes
- Exploit #10103 - CVE-2019-13272 (This is a Python 3 version of this exploit. Hope it works!!!) (June 21, 2024)
- Exploit #7059 - Linux Kernel 5.1.x - 'PTRACE_TRACEME' pkexec Local Privilege Escalation (2) (November 25, 2021)
- Exploit #6066 - Linux Kernel 4.10 < 5.1.17 - 'PTRACE_TRACEME' pkexec Local Privilege Escalation (June 17, 2021)
- Exploit #5868 - Linux Polkit - pkexec helper PTRACE_TRACEME local root (Metasploit) (June 17, 2021)
- Exploit #2660 - vulnerability-exploitation (Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538) (May 12, 2020)
- Exploit #2649 - Exploiting-a-Linux-kernel-vulnerability (Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287) (May 12, 2020)
- Exploit #2382 - CVE-Exploit-Script () (April 7, 2020)
- Exploit #263 - CVE-2019-13272 (The exploit for CVE-2019-13272) (March 18, 2020)
- Exploit #1506 - Linux Polkit pkexec helper PTRACE_TRACEME local root exploit (March 18, 2020)
External References
- https://github.com/torvalds/linux/commit/6994eefb0053799d2e07cd140df6c2ea106c41ee
- https://cdn.kernel.org/pub/linux/kernel/v5.x/
- https://github.com/bcoles/kernel-exploits/tree/master/CVE-2019-13272
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ptrace_trace...
Related Security Bulletins
- Privilege escalation in Linux Kernel ptrace_link
- Debian update for linux
- Red Hat update for kernel-rt
- Red Hat update for kernel
- Red Hat update for kernel-alt
- Slackware Linux update for kernel
- Fedora 29 update for kernel, kernel-headers
- Ubuntu update for linux, linux-azure, linux-gcp and more
- Ubuntu update for linux, linux-azure, linux-gcp and more
- Ubuntu update for linux-aws