CVE-2019-5489
MEDIUMLinux Kernel < 4.19.13 - Information Disclosure via mincore() Page Cache Access
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-5489. PoCs published by mmxsrup.
AI-analyzed exploit summary This repository contains a proof-of-concept for CVE-2019-5489, demonstrating a page cache side-channel attack to establish a covert channel between two processes on Linux kernels before 5.0. The PoC includes sender and receiver processes that transmit data via page cache state manipulation.
Description
The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server.
Exploits (1)
This repository contains a proof-of-concept for CVE-2019-5489, demonstrating a page cache side-channel attack to establish a covert channel between two processes on Linux kernels before 5.0. The PoC includes sender and receiver processes that transmit data via page cache state manipulation.
References (32)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N