CVE-2019-15325

In GalliumOS 3.0, CONFIG_SECURITY_YAMA is disabled but /etc/sysctl.d/10-ptrace.conf tries to set /proc/sys/kernel/yama/ptrace_scope to 1, which might increase risk because of the appearance that a protection mechanism is present when actually it is not.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-08-22

Last modified

2024-08-05

Affected products

• Galliumos (Galliumos)

References

• https://github.com/GalliumOS/galliumos-distro/issues/514
• https://www.kernel.org/doc/Documentation/security/Yama.txt