VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Oct 31, 2019· Updated Jun 17, 2026

CVE-2019-5023

CVE-2019-5023

Description

An exploitable vulnerability exists in the grsecurity PaX patch for the function read_kmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version v4.9.25-unofficialgrsec to v4.9.74-unofficialgrsec. PaX adds a temp buffer to the read_kmem function, which is never freed when an invalid address is supplied. This results in a memory leakage that can lead to a crash of the system. An attacker needs to induce a read to /dev/kmem using an invalid address to exploit this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • grsecurity/PaX patchdescription
  • Grsecurity/PaXllm-create
    Range: pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version v4.9.25-unofficialgrsec to v4.9.74-unofficialgrsec
  • Grsecurity/grsecurityllm-fuzzy
    Range: grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, v4.9.25-unofficialgrsec to v4.9.74-unofficialgrsec
  • Opensrcsec/Grsecurity2 versions
    cpe:2.3:a:opensrcsec:grsecurity:*:*:*:*:official:*:*:*+ 1 more
    • cpe:2.3:a:opensrcsec:grsecurity:*:*:*:*:official:*:*:*range: >=3.1-4.9.8-201702060653,<=3.1-4.9.24-201704252333
    • cpe:2.3:a:opensrcsec:grsecurity:*:*:*:*:unofficial:*:*:*range: >=4.9.25,<=4.9.74
  • Opensrcsec/Pax
    cpe:2.3:a:opensrcsec:pax:*:*:*:*:*:*:*:*
    Range: >=pax-linux-4.9.8-test1,<=pax-linux-4.9.8-test7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.