CVE-2019-5489
Medium
Description
The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedJan 7, 2019
First seenJan 7, 2019
How to fix
Vendor advisories
- debian.org/security/2019/dsa-4465
- access.redhat.com/errata/RHSA-2019:2043
- access.redhat.com/errata/RHSA-2019:2029
- access.redhat.com/errata/RHSA-2019:2473
- access.redhat.com/errata/RHSA-2019:2808
- access.redhat.com/errata/RHSA-2019:2837
- access.redhat.com/errata/RHSA-2019:2809
- access.redhat.com/errata/RHSA-2019:3309
- access.redhat.com/errata/RHSA-2019:3517
- access.redhat.com/errata/RHSA-2019:3967
- access.redhat.com/errata/RHSA-2019:4058
- access.redhat.com/errata/RHSA-2019:4057
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | v ≤ 4.19.13 | — |
| netapp active_iq_performance_analytics_services | No range specified | — |
| netapp element_software_management_node | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.