CVE-2019-11085

Published: May 17, 2019Modified: Jun 17, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (1)

Products: Intel: I915 Firmware

Intel

1 product

I915 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel I915 Firmware	Before 5.0

Running on/with	Platform Versions
Intel I915	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (30)

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html

Source: secure@intel.com

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html

Source: secure@intel.com

http://www.securityfocus.com/bid/108488

Source: secure@intel.com

https://access.redhat.com/errata/RHSA-2019:1873

Source: secure@intel.com

https://access.redhat.com/errata/RHSA-2019:1891

Source: secure@intel.com

https://access.redhat.com/errata/RHSA-2019:1959

Source: secure@intel.com

https://access.redhat.com/errata/RHSA-2019:1971

Source: secure@intel.com

https://access.redhat.com/errata/RHSA-2020:0543

Source: secure@intel.com

https://access.redhat.com/errata/RHSA-2020:0592

Source: secure@intel.com

https://access.redhat.com/errata/RHSA-2020:0609

Source: secure@intel.com

https://support.f5.com/csp/article/K09376613

Source: secure@intel.com

Third Party Advisory

https://usn.ubuntu.com/4068-1/

Source: secure@intel.com

https://usn.ubuntu.com/4068-2/

Source: secure@intel.com

https://usn.ubuntu.com/4118-1/

Source: secure@intel.com

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00249.html

Source: secure@intel.com

PatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html