PT-2019-1108 · Linux+3 · Linux Kernel+3
Timothy Michaud
·
Publicado
2019-02-18
·
Atualizado
2023-04-11
·
CVE-2018-20669
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions through 4.19.13
Description:
A local attacker can exploit an issue in the i915 gem execbuffer2 ioctl function where a provided address with access ok() is not checked, allowing for a malicious IOCTL function call to overwrite arbitrary kernel memory. This can result in a Denial of Service or privilege escalation. The issue is due to a missing validation of a userspace pointer in i915 gem execbuffer2 ioctl of i915 gem execbuffer.c, which could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Recommendations:
For Linux kernel versions through 4.19.13, consider upgrading to a version that includes the fix for this issue, as no specific workaround is provided for these versions.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu