CVE-2019-19241

CVE-2019-19241 is a privilege escalation vulnerability in the Linux kernel prior to version 5.4.2, specifically affecting the io_uring feature. It allows an unprivileged attacker to execute operations with UID 0 and full capabilities, such as adding an IPv4 address to the loopback interface, by exploiting how IORING_OP_SENDMSG operations are handled by kernel worker threads. This vulnerability is rated as HIGH severity (CVSS 7.8), indicating a local attack vector with low complexity and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or widespread community discussion, a public exploit (EDB-47779) exists, demonstrating its feasibility.