CVE-2019-14898

The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmget_not_zero or get_task_mm calls.

• CWE-362
• CWE-667
• CWE-362
• CWE-667

• https://bugs.chromium.org/p/project-zero/issues/detail?id=1790Exploit, Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14898Issue Tracking, Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114Mailing List, Vendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37Mailing List, Vendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10Mailing List, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20200608-0001/
• https://www.oracle.com/security-alerts/cpuApr2021.html
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1790Exploit, Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14898Issue Tracking, Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114Mailing List, Vendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37Mailing List, Vendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10Mailing List, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20200608-0001/
• https://www.oracle.com/security-alerts/cpuApr2021.html

Published

May 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14892A flaw was discovered in jackson-databind in versions before…9.8
• CVE-2019-14893A flaw was discovered in FasterXML jackson-databind in all v…9.8
• CVE-2019-14894A flaw was found in the CloudForms management engine version…7.2
• CVE-2019-14895A heap-based buffer overflow was discovered in the Linux ker…9.8
• CVE-2019-14896A heap-based buffer overflow vulnerability was found in the …9.8
• CVE-2019-14897A stack-based buffer overflow was found in the Linux kernel,…9.8
• CVE-2019-14899A vulnerability was discovered in Linux, FreeBSD, OpenBSD, M…7.4
• CVE-2019-1490A spoofing vulnerability exists when a Skype for Business Se…5.4
• CVE-2019-14900A flaw was found in Hibernate ORM in versions before 5.3.18,…6.5
• CVE-2019-14901A heap overflow flaw was found in the Linux kernel, all vers…9.8
• CVE-2019-14902There is an issue in all samba 4.11.x versions before 4.11.5…5.4
• CVE-2019-14903Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…