CVE
CVE-2019-13272
- First Reported
- Aug 26, 2026
- Latest Reported
- Aug 26, 2026
CVE Enrichment
- CVSS
- 7.8 HIGH
- EPSS
- 52.20%
- EPSS Percentile
- 98.94%
- CISA KEV
- YES — Known Exploited Vulnerability
Description
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- cve@mitre.org
- Published
- 17-Jul-2019 20:15
- Last Modified
- 17-Jun-2026 09:16
- EPSS Date
- 2026-10-11
CVSS Vector
CVSS:3.1 AV:L /
AC:L /
PR:L /
UI:N /
S:U /
C:H /
I:H /
A:H
CISA KEV Details
- Date Added
- 2021-12-10
- Remediation Due
- 2022-06-10
- Known Ransomware Campaign Use
- Unknown
- Required Action
- Apply updates per vendor instructions.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2019-13272
Affected Products / Versions
- linux / linux_kernel
Version / affected range: * · from (inclusive) 3.16.52 · before (exclusive) 3.16.71
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 4.1.39 · before (exclusive) 4.2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 4.4.40 · before (exclusive) 4.4.185
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 4.8.16 · before (exclusive) 4.9
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 4.9.1 · before (exclusive) 4.9.185
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 4.10 · before (exclusive) 4.14.133
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 4.15 · before (exclusive) 4.19.58
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 4.20 · before (exclusive) 5.1.17
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - debian / debian_linux
Version / affected range: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* - debian / debian_linux
Version / affected range: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* - debian / debian_linux
Version / affected range: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* - fedoraproject / fedora
Version / affected range: 29
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* - canonical / ubuntu_linux
Version / affected range: 16.04
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* - canonical / ubuntu_linux
Version / affected range: 18.04
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:* - canonical / ubuntu_linux
Version / affected range: 19.04
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* - redhat / enterprise_linux
Version / affected range: 7.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* - redhat / enterprise_linux
Version / affected range: 8.0
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* - redhat / enterprise_linux_for_arm_64
Version / affected range: 7.0_aarch64
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:7.0_aarch64:*:*:*:*:*:*:* - redhat / enterprise_linux_for_ibm_z_systems
Version / affected range: 7.0_s390x
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:* - redhat / enterprise_linux_for_real_time
Version / affected range: 8
cpe:2.3:o:redhat:enterprise_linux_for_real_time:8:*:*:*:*:*:*:* - redhat / enterprise_linux_for_real_time_for_nfv
Version / affected range: 8.0
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8.0:*:*:*:*:*:*:* - redhat / enterprise_linux_for_real_time_for_nfv_tus
Version / affected range: 8.2
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.2:*:*:*:*:*:*:* - redhat / enterprise_linux_for_real_time_for_nfv_tus
Version / affected range: 8.4
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.4:*:*:*:*:*:*:* - redhat / enterprise_linux_for_real_time_for_nfv_tus
Version / affected range: 8.6
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.6:*:*:*:*:*:*:* - redhat / enterprise_linux_for_real_time_for_nfv_tus
Version / affected range: 8.8
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.8:*:*:*:*:*:*:* - redhat / enterprise_linux_for_real_time_tus
Version / affected range: 8.2
cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.2:*:*:*:*:*:*:* - redhat / enterprise_linux_for_real_time_tus
Version / affected range: 8.4
cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.4:*:*:*:*:*:*:* - redhat / enterprise_linux_for_real_time_tus
Version / affected range: 8.6
cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.6:*:*:*:*:*:*:* - redhat / enterprise_linux_for_real_time_tus
Version / affected range: 8.8
cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.8:*:*:*:*:*:*:* - netapp / aff_a700s_firmware
Version / affected range: -
cpe:2.3:o:netapp:aff_a700s_firmware:-:*:*:*:*:*:*:* - netapp / h410c_firmware
Version / affected range: -
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* - netapp / h610s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:* - netapp / active_iq_unified_manager
Version / affected range: -
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* - netapp / e-series_performance_analyzer
Version / affected range: -
cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:* - netapp / e-series_santricity_os_controller
Version / affected range: * · from (inclusive) 11.0.0 · through (inclusive) 11.60.3
cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* - netapp / hci_management_node
Version / affected range: -
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* - netapp / service_processor
Version / affected range: -
cpe:2.3:a:netapp:service_processor:-:*:*:*:*:*:*:* - netapp / solidfire
Version / affected range: -
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* - netapp / steelstore_cloud_integrated_storage
Version / affected range: -
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* - netapp / hci_compute_node
Version / affected range: -
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- CISA Advisory
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- CVE-2019-13272: a vulnerability caused by improper handling of privilege inheritance, which can be exploited to achieve privilege escalation Kaspersky Reports Rising Vulnerability Disclosures and Early Exploit Releases in Q2 2026
CVE (26)
People (2)
Vendors (2)
Products (15)
Tools (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.