CVE-2018-20669 An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A loca...
HighCVSS 7.8
EPSS 0.58%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 5.2.6-1 | 5.2.6-1 |
| debian/linux(Debian:13) | < 5.2.6-1 | 5.2.6-1 |
| debian/linux(Debian:14) | < 5.2.6-1 | 5.2.6-1 |
| Linux kernel | >= 4.13, < 4.14.185 | 4.14.185 |
| Linux kernel | >= 4.15, < 4.19.129 | 4.19.129 |
| Linux kernel | >= 4.20, < 5.0 | 5.0 |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| netapp hci management node | All versions | No fix listed |
| netapp snapprotect | All versions | No fix listed |
| netapp solidfire | All versions | No fix listed |
| netapp cn1610 firmware | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-4485-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-20669 vendor-advisory
- git.kernel.org release-notes vendor-advisory
- [opensuse-security-announce] 20190218 [security-announce] openSUSE-SU-2019:0203-1: important: Security update for the Linux Kernel mailing-list third-party-advisory
- [oss-security] 20190123 Linux Kernel: Missing access_ok() checks in IOCTL function (gpu/drm/i915 Driver) exploit mailing-list patch third-party-advisory
- 106748 broken-link third-party-advisory vdb-entry
- access.redhat.com third-party-advisory
- security.netapp.com third-party-advisory
- support.f5.com third-party-advisory
- USN-4485-1 third-party-advisory vendor-advisory