AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-20794

MEDIUM · CVSS 4.7 EPSS 0.51% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-05-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2019-20794
Severity
MEDIUM
CVSS
4.7
EPSS
0.51%
Linux

Original NVD Description

An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.