CVE-2019-13272VulnerabilityPublished 12/10/2021Updated 10/24/2026

CVE-2019-13272: Linux Kernel Improper Privilege Management Vulnerability

Affects Linux KernelSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 12/10/2021
KEV deadline: 06/10/2022
EPSS: 52.2% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2019-13272 (opens in a new tab)

Description

CVE-2019-13272 is a Linux kernel vulnerability in the ptrace subsystem that improperly manages privileges, allowing local users to escalate their privileges to root. This vulnerability has been exploited in the wild. It affects the Linux kernel but no specific affected versions are provided in the available data.

Summary

The vulnerability identified as CVE-2019-13272 exists in the Linux kernel's ptrace.c component, where improper privilege management allows local users to gain root access. This flaw is classified under CWE-269 (Improper Privilege Management). Exploitation of this vulnerability has been observed in the wild, indicating active use by attackers. No explicit affected versions or patch information are provided in the source data.

Impact

Local users can exploit this vulnerability to escalate their privileges to root, potentially gaining full control over the affected system. This can lead to unauthorized access, system compromise, and the ability to execute arbitrary code with elevated privileges.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Linux kernel advisories and apply updates promptly once available.

Weaknesses

CWE-269Improper Privilege Management (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:56:07 UTC

Weaknesses

References

Related threats