CVE-2019-18675 (High) detected in linux-stable-rtv4.1

[mend-bolt-for-github[bot]]

CVE-2019-18675 - High Severity Vulnerability

Vulnerable Library - linux-stable-rtv4.1

Library home page: https://git.kernel.org/pub/scm/linux/kernel/git/zanussi/linux-stable-rt.git

Found in HEAD commit: d320b28538efef34097703b1fd51d4131f87b779

Found in base branch: master

Vulnerable Source Files (3)

/drivers/media/usb/cpia2/cpia2_core.c /drivers/media/usb/cpia2/cpia2_core.c /drivers/media/usb/cpia2/cpia2_core.c

Vulnerability Details

The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.

Publish Date: 2019-11-25

URL: CVE-2019-18675

CVSS 3 Score Details (7.8)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: High - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2019-18675

Release Date: 2020-01-03

Fix Resolution: linux-libc-headers - 5.10;linux-yocto - 4.8.26+gitAUTOINC+1c60e003c7_27efc3ba68,5.4.20+gitAUTOINC+c11911d4d1_f4d7dbafb1

---

Step up your Open Source Security Game with Mend here

[mend-bolt-for-github[bot]]

:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.