ACTIVELY EXPLOITED

CVE-2019-13272: Linux Kernel Improper Privilege Management Vulnerability

Facts
VendorLinux
ProductKernel
Actively exploitedYes
Added to CISA KEV10 Dec 2021
CISA federal deadline10 Jun 2022
Weakness (CWE)CWE-269

Required action (CISA's text)

Apply updates per vendor instructions.

Description (NVD)

Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.

SOURCES

Other Linux flaws

Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.