Bug 1157905 (CVE-2019-14898)

Summary: VUL-1: CVE-2019-14898: kernel-source: kernel: incomplete fix for race condition between mmget_not_zero()/get_task_mm() and core dumping
Product: [Novell Products] SUSE Security Incidents Reporter: Wolfgang Frisch <wolfgang.frisch>
Component: IncidentsAssignee: E-mail List <kernel-maintainers>
Status: RESOLVED FIXED QA Contact: Security Team bot <security-team>
Severity: Normal    
Priority: P4 - Low CC: mhocko, smash_bz, tiwai, vbabka
Version: unspecified   
Target Milestone: ---   
Hardware: Other   
OS: Other   
URL: https://smash.suse.de/issue/247697/
See Also: https://bugzilla.suse.com/show_bug.cgi?id=1133738
Whiteboard:
Found By: Security Response Team Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Comment 3 Michal Hocko 2019-11-27 14:58:56 UTC
Which part of the fix is missing? The referenced commit is the original fix which we should have.