{"id":"CVE-2019-20794","revision":"2a4bc6f2b68f4bc5b24a5df9113718ab","records":[{"revision":"2a4bc6f2b68f4bc5b24a5df9113718ab","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2019-20794","aliases":[],"title":"An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the usersp…","description":"An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the userspace component is terminated via a kill of the PID namespace's pid 1, it will result in a hung task, and resources being permanently locked up until system reboot. This can result in resource exhaustion.","state":0,"publishedAt":"2020-05-09T17:35:50+00:00","modifiedAt":"2026-10-08T21:03:30.09+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://github.com/sargun/fuse-example","https://sourceforge.net/p/fuse/mailman/message/36598753/","https://security.netapp.com/advisory/ntap-20200608-0001/","http://www.openwall.com/lists/oss-security/2020/08/24/1"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2019-20794","license":"CVE Program Terms of Use","key":"cve-program:CVE-2019-20794","identifiers":["CVE-2019-20794"]},"retained":false,"historicalAffected":[]}],"coverage":[]}