{"cve_id":"CVE-2019-13272","published":"2019-07-17T13:15:10.687000+00:00","last_modified":"2026-06-17T02:16:26.033000+00:00","vuln_status":"Analyzed","description":"In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","base_score":7.8,"base_severity":"HIGH","attack_vector":"LOCAL","privileges_req":"LOW","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":[],"in_kev":true,"kev_date_added":"2021-12-10","kev_ransomware":false,"epss_score":0.52199,"epss_percentile":0.9896,"cap_rule_version":"0.1.1","stage":"EXECUTION","req_access":"USER","req_vector":"LOCAL","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"medium","ingested_at":"2026-09-18T09:01:28.854451+00:00","first_seen":"2019-07-17T13:15:10.687000+00:00","kev_first_seen":"2021-12-10T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["canonical","debian","fedoraproject","linux","netapp","redhat"],"products":["active_iq_unified_manager","aff_a700s","aff_a700s_firmware","debian_linux","e-series_performance_analyzer","e-series_santricity_os_controller","enterprise_linux","enterprise_linux_for_arm_64","enterprise_linux_for_ibm_z_systems","enterprise_linux_for_real_time","enterprise_linux_for_real_time_for_nfv","enterprise_linux_for_real_time_for_nfv_tus","enterprise_linux_for_real_time_tus","fedora","h410c","h410c_firmware","h610s","h610s_firmware","hci_compute_node","hci_management_node","linux_kernel","service_processor","solidfire","steelstore_cloud_integrated_storage","ubuntu_linux"],"affected":[{"vendor":"canonical","product":"ubuntu_linux","ranges":["19.04","16.04","18.04"]},{"vendor":"debian","product":"debian_linux","ranges":["9.0","10.0","8.0"]},{"vendor":"fedoraproject","product":"fedora","ranges":["29"]},{"vendor":"linux","product":"linux_kernel","ranges":["≥ 4.20 and < 5.1.17","≥ 3.16.52 and < 3.16.71","≥ 4.1.39 and < 4.2","≥ 4.4.40 and < 4.4.185","≥ 4.8.16 and < 4.9","≥ 4.9.1 and < 4.9.185","≥ 4.10 and < 4.14.133","≥ 4.15 and < 4.19.58"]},{"vendor":"netapp","product":"active_iq_unified_manager","ranges":["all versions"]},{"vendor":"netapp","product":"aff_a700s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"e-series_performance_analyzer","ranges":["all versions"]},{"vendor":"netapp","product":"e-series_santricity_os_controller","ranges":["≥ 11.0.0 and ≤ 11.60.3"]},{"vendor":"netapp","product":"h410c_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h610s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"hci_compute_node","ranges":["all versions"]},{"vendor":"netapp","product":"hci_management_node","ranges":["all versions"]},{"vendor":"netapp","product":"service_processor","ranges":["all versions"]},{"vendor":"netapp","product":"solidfire","ranges":["all versions"]},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage","ranges":["all versions"]},{"vendor":"redhat","product":"enterprise_linux","ranges":["8.0","7.0"]},{"vendor":"redhat","product":"enterprise_linux_for_arm_64","ranges":["7.0_aarch64"]},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems","ranges":["7.0_s390x"]},{"vendor":"redhat","product":"enterprise_linux_for_real_time","ranges":["8"]},{"vendor":"redhat","product":"enterprise_linux_for_real_time_for_nfv","ranges":["8.0"]},{"vendor":"redhat","product":"enterprise_linux_for_real_time_for_nfv_tus","ranges":["8.2","8.8","8.6","8.4"]},{"vendor":"redhat","product":"enterprise_linux_for_real_time_tus","ranges":["8.2","8.8","8.6","8.4"]}]}