Lucene search

K
f5F5F5:K30404955
HistorySep 25, 2020 - 12:00 a.m.

K30404955 : Linux kernel vulnerability CVE-2019-5489

2020-09-2500:00:00
my.f5.com
49
linux kernel
mincore
vulnerability
page cache
access patterns
local attackers
secret information
apache http server

AI Score

6.3

Confidence

High

EPSS

0

Percentile

10.1%

Security Advisory Description

The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server. (CVE-2019-5489)

Impact

There is no impact; F5 products are not affected by this vulnerability.