Lucene search

K
redhatcveRedhat.comRH:CVE-2019-17055
HistoryApr 08, 2020 - 10:22 p.m.

CVE-2019-17055

2020-04-0822:22:29
redhat.com
access.redhat.com
14

EPSS

0.001

Percentile

18.0%

A vulnerability was found in the Linux kernel’s implementation of the AF_ISDN protocol, which does not enforce the CAP_NET_RAW capability. This flaw can allow unprivileged users to create a raw socket for this protocol. This could further allow the user to control the availability of an existing ISDN circuit.

Mitigation

At this time the only known way to 'mitigate' this flaw is to blacklist the kernel module from being loaded. Creating raw sockets with this protocol is a method of communicating with ISDN hardware, a technology that is becoming less and less common.

Check <https://access.redhat.com/solutions/41278&gt; for instructions on how to disable the mISDN_core.ko module.