Sploitus

CVE-2019-13272

41 known exploits for CVE-2019-13272

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.

Affected products
Alt Linux, Centos, Linux Kernel, Red Hat, Suse, Ubuntu
Linux Linux Kernel
< 3.16.71, 4.2, 4.4.185, 4.9, 4.9.185, 4.14.133, 4.19.58, 5.1.17
Fix
Available
CVSS 3.1
7.8 HIGH
EPSS
52.2% (99th percentile)
NVD status
Analyzed
Published
2019-07-17
CVE-2019-13272 at NVD
Authoritative description, scoring and affected products

41 known exploits for CVE-2019-13272

Proof-of-concept code and exploit modules indexed by Sploitus

vulnerability-exploitation
2026-08-27 KitPloitKITPLOIT
ptrace-vuln
2026-08-27 KitPloitKITPLOIT
kernel-exploits
2026-08-27 KitPloitKITPLOIT
CVE-2019-13272
2026-08-27 KitPloitKITPLOIT
CVE-2019-13272
2026-08-27 KitPloitKITPLOIT
CVE-2019-13272
2026-08-27 KitPloitKITPLOIT
CVE-2019-13272
2026-08-27 KitPloitKITPLOIT
CVE-2019-13272
2026-08-27 KitPloitKITPLOIT
ptrace_scope-CVE-2019-13272-privilege-escalation
2026-08-26 KitPloitKITPLOIT
CVE-2019-13272
2026-08-26 KitPloitKITPLOIT
CVE-2019-13272-Local-Privilege-Escalation
2026-08-26 KitPloitKITPLOIT
-Kernel-ptrace-c-mishandles-vulnerability-CVE-2019-13272
2026-08-26 KitPloitKITPLOIT
CVE-2019-13272
2026-08-26 KitPloitKITPLOIT
CVE-2019-13272---Documentation
2026-08-26 KitPloitKITPLOIT
Privilege-Escalation-CVE-2019-13272-
2026-08-26 KitPloitKITPLOIT
cve-2019-13272
2026-08-25 KitPloitKITPLOIT
CVE-2019-13272
2026-08-25 KitPloitKITPLOIT
Exploiting-a-Linux-kernel-vulnerability
2026-08-25 KitPloitKITPLOIT
CVE-2019-13272
2026-08-25 KitPloitKITPLOIT
secureCodingDemo
2026-08-19 KitPloitKITPLOIT
Exploit for Race Condition in Canonical Ubuntu_Linux
2026-02-04 medaminkh-devGITHUB
Exploit for CVE-2019-13272
2025-07-27 mirrors_jas502nGITEE
Linux Kernel 5.1.x - (PTRACE_TRACEME) pkexec Local Privilege Escalation Exploit (2)
2021-11-23 Ujas DhamiZDTC
Linux Kernel 5.1.x PTRACE_TRACEME pkexec Local Privilege Escalation
2021-11-23 Ujas DhamiPACKETSTORMC
Linux Kernel 5.1.x - 'PTRACE_TRACEME' pkexec Local Privilege Escalation (2)
2021-11-23 Ujas DhamiEXPLOITDBC
Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform
2020-12-08 Keepb1ueGITEE
Exploit for CVE-2019-13272
2020-10-09 sh3llsasGITEE
Linux PTRACE_TRACEME Local Root Exploit
2020-03-26 nu11secur1tyZDTC
Linux PTRACE_TRACEME Local Root
2020-03-26 nu11secur1tyPACKETSTORMC
Linux Polkit - pkexec helper PTRACE_TRACEME local root (Metasploit)
2019-10-24 MetasploitEXPLOITDBRuby
Linux Polkit pkexec Helper PTRACE_TRACEME Local Root Exploit
2019-10-23 metasploitZDTRuby
Linux Polkit pkexec Helper PTRACE_TRACEME Local Root
2019-10-23 Brendan ColesPACKETSTORMRuby
Exploit for CVE-2019-13272
2019-08-07 oneoyGITHUB
Exploit for CVE-2019-13272
2019-07-31 Cyc1eCGITHUB
Exploit for CVE-2019-13272
2019-07-31 jas502nGITHUB
Linux Kernel 4.10 < 5.1.17 - PTRACE_TRACEME pkexec Local Privilege Escalation Exploit
2019-07-26 bcolesZDTC
Linux Kernel 4.10 5.1.17 - PTRACE_TRACEME pkexec Local Privilege Escalation
2019-07-24 bcolesEXPLOITPACKC
Linux Kernel 4.10 < 5.1.17 - 'PTRACE_TRACEME' pkexec Local Privilege Escalation
2019-07-24 bcolesEXPLOITDBC
Linux - Broken Permission and Object Lifetime Handling for PTRACE_TRACEME Exploit
2019-07-17 Google Security ResearchZDTC
Linux - Broken Permission and Object Lifetime Handling for PTRACE_TRACEME
2019-07-17 Google Security ResearchEXPLOITDBC
Linux Polkit pkexec helper PTRACE_TRACEME local root exploit
2019-07-04 Jann Horn, bcoles <bcoles@gmail.com>, timwrMETASPLOITRuby