HIGHCVSS v3.1 7.8Actively exploited · CISA KEV since 2021-12-10Vulnerability

CVE-2019-13272

Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.

Properties

Vulnerability name
Linux Kernel Improper Privilege Management Vulnerability
First seen
2025-10-21T23:45:33+00:00
Cvss score
7.8
Epss score
0.52199
Last seen
2026-10-19T12:00:27+00:00
Due date
2022-06-10
Euvd assigner
mitre
Retrieved at
2026-10-21T01:24:47+00:00
Exploited euvd since
2021-12-10T00:00:00+00:00
Src batch id
epss_history-20261020T103617Z-728ddd
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2021-12-10
Score
7.8
Euvd base score version
3.1
Fetched at
2026-10-20T10:36:20+00:00
Cvss vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In Signal since
initial import (Sep 2026)
Euvd base score
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vendor project
Linux

Related Entities (38 · showing 22)

AFFECTS_PRODUCT (36 · showing 20)

→[Product]cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:netapp:aff_a700s:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:redhat:enterprise_linux_for_arm_64:7.0_aarch64:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
→[Product]cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.2:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*
→[Product]cpe:2.3:o:netapp:aff_a700s_firmware:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.2:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:netapp:service_processor:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.4:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.6:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*

DESCRIBES (1)

←[KEVEntry]Linux Kernel Improper Privilege Management Vulnerability

INVOLVES (1)

←[Signal]kev_added · 2021-12-10

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2019-13272 (CVSS v3.1 7.8) — Ninja Signal Threat Intelligence | Ninja Signal