CVE-2018-20669

Published: Mar 21, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.

Affected (10)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Netapp: Hci Management Node, Snapprotect, Solidfire, Cn1610 Firmware

1 product

1 product

4 products

Hci Management Node

Cn1610 Firmware

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.13 to 4.14.185
Linux Linux Kernel	From 4.15 to 4.19.129
Linux Linux Kernel	From 4.20 to 5.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Netapp Hci Management Node	All versions
Netapp Snapprotect	All versions
Netapp Solidfire	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Cn1610 Firmware	All versions

Running on/with	Platform Versions
Netapp Cn1610	All versions

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/log/drivers/gpu/drm/i915/i915_gem_execbuffer.c

Source: cve@mitre.org

Release NotesVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/01/23/6

Source: cve@mitre.org

ExploitMailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/106748

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

https://access.redhat.com/security/cve/cve-2018-20669

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20190404-0002/

Source: cve@mitre.org

Third Party Advisory

https://support.f5.com/csp/article/K32059550

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4485-1/

Source: cve@mitre.org

Third Party Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/log/drivers/gpu/drm/i915/i915_gem_execbuffer.c

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/01/23/6

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/106748

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

https://access.redhat.com/security/cve/cve-2018-20669

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20190404-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.f5.com/csp/article/K32059550

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4485-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.