CVE-2019-17052: Canonical Ubuntu Linux

Low severity, CVSS 3.3. EPSS: 0.6% chance of exploitation in the next 30 days.

ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 19.04 only
• Debian Debian Linux: version 8.0 only
• Fedoraproject Fedora: version 29 only
• Linux Linux Kernel: from 3.16, up to and including 5.3.2

Published 2019-10-01. Last modified 2026-06-17.