--- title: "CVE-2019-14898\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2019-14898?format=md keywords: index, follow --- # CVE-2019-14898 Publication date 8 May 2020 Last updated 25 August 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) ## Cvss 3 Severity Score **7.0 · High** [Score breakdown](https://ubuntu.com/security/CVE-2019-14898?format=md#impact-score) Toggle side navigation ## Description The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmget\_not\_zero or get\_task\_mm calls. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | linux | 19.10 eoan | Not affected | | 19.04 disco | Ignored end of life | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Ignored end of standard support | | linux-aws | 19.10 eoan | Not affected | | 19.04 disco | Ignored end of life | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Ignored end of standard support | | linux-aws-5.0 | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-aws-hwe | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-azure | 19.10 eoan | Not affected | | 19.04 disco | Ignored end of life | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Ignored end of standard support | | linux-azure-edge | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Ignored end of standard support, was not-affected | | 14.04 LTS trusty | Not in release | | linux-gcp | 19.10 eoan | Not affected | | 19.04 disco | Ignored end of life | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-gcp-5.3 | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-gcp-edge | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-gke-4.15 | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-gke-5.0 | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-hwe | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-hwe-edge | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Ignored end of standard support, was not-affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-kvm | 19.10 eoan | Not affected | | 19.04 disco | Ignored end of life | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-lts-trusty | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lts-xenial | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Ignored end of standard support | | linux-oem | 19.10 eoan | Not affected | | 19.04 disco | Ignored end of life | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Ignored end of standard support, was not-affected | | 14.04 LTS trusty | Not in release | | linux-oem-5.4 | 19.10 eoan | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-oem-osp1 | 19.10 eoan | Not affected | | 19.04 disco | Ignored end of life | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-oracle | 19.10 eoan | Not affected | | 19.04 disco | Ignored end of life | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-oracle-5.0 | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-raspi2 | 19.10 eoan | Not affected | | 19.04 disco | Ignored end of life | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | | linux-raspi2-5.3 | 19.10 eoan | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-snapdragon | 19.10 eoan | Not in release | | 19.04 disco | Ignored end of life | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | 14.04 LTS trusty | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## Severity score breakdown CVSS version: CVSS v3.0 **Base score** 7.0 · High * Base metrics | Parameter | Value | | --- | --- | | Attack vector | Local | | Attack complexity | High | | Privileges required | Low | | User interaction | None | | Scope | Unchanged | | Confidentiality impact | High | | Integrity impact | High | | Availability impact | High | * Scores | Parameter | Value | | --- | --- | | Base score | 7.0 · High | | Exploitability score | - | | Impact score | - | **Vector:** CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14898) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2019-14898) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2019-14898) * [Debian](https://security-tracker.debian.org/tracker/CVE-2019-14898) ### Other references *