CVE-2018-20669

 

Published at: - 21-03-2019 05:00

Last modified: - 20-01-2023 04:50

Total changes: - 4

Description

An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://access.redhat.com/security/cve/cve-2018-20669
• 106748-Broken Link
• [oss-security] 20190123 Linux Kernel: Missing access_ok() checks in IOCTL function (gpu/drm/i915 Driver)-Exploit, Mailing List, Patch, Third Party Advisory
• [opensuse-security-announce] 20190218 [security-announce] openSUSE-SU-2019:0203-1: important: Security update for the Linux Kernel-Mailing List, Third Party Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/log/drivers/gpu/drm/i915/i915_gem_execbuffer.c
• https://security.netapp.com/advisory/ntap-20190404-0002/
• https://support.f5.com/csp/article/K32059550
• USN-4485-1-Third Party Advisory

 

Keywords

NVD

 

CVE-2018-20669

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures