Skip to content
COOEY

EXPOSURES › CVE-2019-13272

CVE-2019-13272

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2021-12-10 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-13272 ↗
⌖ EXPLOITED IN THE WILD SHAME 78/100 exploited-in-wildunpatchedprivilege-escalation

A local privilege escalation flaw in the Linux kernel allowed unprivileged users to gain root access via improper ptrace handling.

This kernel vulnerability (CVE-2019-13272) was actively exploited in the wild, proving that even foundational OS components are not immune to critical flaws. For DIB organizations, this highlights the severe risk of relying on unpatched or improperly managed Linux systems, as a local user could escalate to full system compromise. The failure underscores the necessity of rigorous patch management and strict local privilege controls to prevent such escalations.

Shame score — The vulnerability was actively exploited in the wild (KEV) and allowed local users to escalate to root, demonstrating a severe, avoidable failure in the foundational Linux kernel that attackers leveraged for system compromise.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.

SENTIMENT · TRUSTED SOURCES
synthesis neutral +0.00
No sentiment expressed; sources are CVE databases or unrelated news.
cooey ↗ neutral +0.00
Neutral CVE database entry; no sentiment toward vendor.
app.opencve.io ↗ neutral +0.00
Neutral CVE database entry; no sentiment toward vendor.
cvefeed.io ↗ neutral +0.00
Neutral CVE database entry; no sentiment toward vendor.
www.nbcnews.com ↗ neutral +0.00
Irrelevant news article; no sentiment toward vendor.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.