CVE-2019-3901

Published: Apr 22, 2019Modified: Jun 17, 2026

4.7

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.0 / Impact: 3.6

Source: NVD

Description

A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the ptrace_may_access() call, it is possible for the specified target task to perform an execve() syscall with setuid execution before perf_event_alloc() actually attaches to it, allowing an attacker to bypass the ptrace_may_access() check and the perf_event_exit_task(current) call that is performed in install_exec_creds() during privileged execve() calls. This issue affects kernel versions before 4.8.

Affected (10)

Products: Linux: Linux Kernel · Debian: Debian Linux · Netapp: Active Iq Unified Manager For Vmware Vsphere, Hci Management Node, Snapprotect, Solidfire, Storage Replication Adapter For Clustered Data Ontap For Vmware Vsphere, Vasa Provider For Clustered Data Ontap, Virtual Storage Console For Vmware Vsphere, Cn1610 Firmware

1 product

1 product

8 products

Active Iq Unified Manager For Vmware Vsphere

Hci Management Node

Snapprotect

Solidfire

Storage Replication Adapter For Clustered Data Ontap For Vmware Vsphere

Vasa Provider For Clustered Data Ontap

Virtual Storage Console For Vmware Vsphere

Cn1610 Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 4.8

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager For Vmware Vsphere	From 9.5
Netapp Hci Management Node	All versions
Netapp Snapprotect	All versions
Netapp Solidfire	All versions
Netapp Storage Replication Adapter For Clustered Data Ontap For Vmware Vsphere	From 7.2
Netapp Vasa Provider For Clustered Data Ontap	From 7.2
Netapp Virtual Storage Console For Vmware Vsphere	From 7.2