VYPR
← All advisories
Unrated severityOSV Advisory· Published Mar 21, 2019· Updated Aug 4, 2024

CVE-2019-9893

CVE-2019-9893

Description

libseccomp before 2.4.0 mishandles 64-bit syscall argument comparisons, allowing seccomp filter bypass and potential privilege escalation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

libseccomp before 2.4.0 mishandles 64-bit syscall argument comparisons, allowing seccomp filter bypass and potential privilege escalation.

Vulnerability

libseccomp versions before 2.4.0 contain a flaw in the generation of 64-bit syscall argument comparisons when using the arithmetic operators (LT, GT, LE, GE). This incorrect comparison logic can cause the seccomp filter to improperly evaluate syscall arguments, potentially allowing an attacker to bypass intended access restrictions [1][2][3][4].

Exploitation

An attacker with the ability to execute code on a system that uses libseccomp to filter syscalls can craft syscalls with specific argument values that exploit the flawed comparison generation. No special privileges or user interaction beyond code execution are required; the attacker simply needs to invoke the affected syscall path [2][3].

Impact

Successful exploitation allows an attacker to bypass seccomp filters, which may lead to unauthorized system call execution and potential privilege escalation. The exact impact depends on the seccomp policy in place, but the vulnerability can undermine the security guarantees provided by the filter [4].

Mitigation

The vulnerability is fixed in libseccomp version 2.4.0 and later. Red Hat Enterprise Linux 8 provides libseccomp 2.4.1 [1], Ubuntu provides updates via USN-4001-1 and USN-4001-2 [2][3], and Gentoo recommends upgrading to >=2.4.0 [4]. No workaround is available; upgrading the library is required [4].

References
  1. https://access.redhat.com/errata/RHSA-2019:3624
  2. USN-4001-2: libseccomp vulnerability | Ubuntu security notices | Ubuntu
  3. USN-4001-1: libseccomp vulnerability | Ubuntu security notices | Ubuntu
  4. Privilege escalation (GLSA 201904-18) — Gentoo security

AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

25

Patches

0

No patches discovered yet.

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

8

News mentions

0

No linked articles in our index yet.