CVE-2019-13272

Name	CVE-2019-13272
Description	In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-1862-1, DLA-1863-1, DSA-4484-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	bullseye	5.10.223-1	fixed
	bullseye (security)	5.10.226-1	fixed
	bookworm	6.1.115-1	fixed
	bookworm (security)	6.1.119-1	fixed
	trixie	6.12.5-1	fixed
	sid	6.12.6-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
linux	source	jessie	3.16.70-1	DLA-1862-1
linux	source	stretch	4.9.168-1+deb9u4	DSA-4484-1
linux	source	buster	4.19.37-5+deb10u1	DSA-4484-1
linux	source	(unstable)	4.19.37-6
linux-4.9	source	jessie	4.9.168-1+deb9u4~deb8u1	DLA-1863-1

Notes

https://bugzilla.suse.com/show_bug.cgi?id=1140671
https://bugs.chromium.org/p/project-zero/issues/detail?id=1903
https://git.kernel.org/linus/6994eefb0053799d2e07cd140df6c2ea106c41ee