6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
kernel is vulnerable to authorization bypass. The vulnerability exists through l2tp with race condition between pppol2tp_session_create() and l2tp_eth_create().
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
access.redhat.com/errata/RHSA-2019:2029
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1335986
bugzilla.redhat.com/show_bug.cgi?id=1436351
bugzilla.redhat.com/show_bug.cgi?id=1537033
bugzilla.redhat.com/show_bug.cgi?id=1552203
bugzilla.redhat.com/show_bug.cgi?id=1577640
bugzilla.redhat.com/show_bug.cgi?id=1590228
bugzilla.redhat.com/show_bug.cgi?id=1593417
bugzilla.redhat.com/show_bug.cgi?id=1608955
bugzilla.redhat.com/show_bug.cgi?id=1609699
bugzilla.redhat.com/show_bug.cgi?id=1613056
bugzilla.redhat.com/show_bug.cgi?id=1616109
bugzilla.redhat.com/show_bug.cgi?id=1616425
bugzilla.redhat.com/show_bug.cgi?id=1622167
bugzilla.redhat.com/show_bug.cgi?id=1627563
bugzilla.redhat.com/show_bug.cgi?id=1628378
bugzilla.redhat.com/show_bug.cgi?id=1659146
bugzilla.redhat.com/show_bug.cgi?id=1665990
bugzilla.redhat.com/show_bug.cgi?id=1684780
bugzilla.redhat.com/show_bug.cgi?id=1693457
source.android.com/security/bulletin/pixel/2018-09-01
usn.ubuntu.com/3932-1/
usn.ubuntu.com/3932-2/
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C