CVE-2019-5023

An exploitable vulnerability exists in the grsecurity PaX patch for the function readkmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version...

CVE-2019-5023

creationtimestamp| type| source ---|---|--- 2024-02-01 14:46:11+00:00| seen| https://t.me/ctinow/177585...

CVE-2019-5023

The CVE-2019-5023 entry concerns the grsecurity/PaX patch’s read_kmem function. A temporary buffer allocated in read_kmem is not freed when an invalid address is read, causing a memory leak and potential system crash. A local attacker can trigger this by inducing reads to /dev/kmem with an invali...