CVE-2019-5489

CVE-2019-5489 describes a local information disclosure vulnerability in the Linux kernel's mincore() implementation (through version 4.19.13), affecting various Linux-based products including NetApp offerings. This flaw allows local attackers to observe page cache access patterns of other processes, potentially enabling the sniffing of sensitive information, with limited remote exploitation also possible via latency differences. Rated 5.5 MEDIUM (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), it has low attack complexity and requires local privileges, leading to high confidentiality impact. While not listed in CISA's KEV catalog and lacking public exploit tools like Metasploit or ExploitDB, it has garnered some community discussion and media coverage, indicating awareness of its potential.