Bug 1758239 (CVE-2019-17052) - CVE-2019-17052 kernel: unprivileged users able to create RAW sockets in the the AF_AX25 network protocol.
Summary: CVE-2019-17052 kernel: unprivileged users able to create RAW sockets in the t...
Alias: CVE-2019-17052
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
Depends On: 1758240
Blocks: 1758241
TreeView+ depends on / blocked
Reported: 2019-10-03 16:29 UTC by Dhananjay Arunesh
Modified: 2020-12-23 02:41 UTC (History)
47 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Last Closed: 2019-12-06 10:33:29 UTC

Attachments (Terms of Use)

Description Dhananjay Arunesh 2019-10-03 16:29:18 UTC
A vulnerability was found in  ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel, does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.


Comment 1 Dhananjay Arunesh 2019-10-03 16:29:54 UTC
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 1758240]

Comment 2 Fedora Update System 2019-10-25 18:07:06 UTC
kernel-5.3.6-100.fc29, kernel-headers-5.3.6-100.fc29, kernel-tools-5.3.6-100.fc29 has been pushed to the Fedora 29 stable repository. If problems still persist, please make note of it in this bug report.

Comment 3 Wade Mealing 2019-12-04 05:53:21 UTC
Red Hat Enterprise Linux does not ship a kernel with support for the AF_AX25 socket type and therefore Red Hat Enterprise Linux is not affected.

Note You need to log in before you can comment on or make changes to this bug.