UBUNTU-CVE-2018-20669
An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.
02 / AFFECTED SOFTWARE
Affected packages
29 explicit affected versions
60 explicit affected versions
51 explicit affected versions
73 explicit affected versions
23 explicit affected versions
27 explicit affected versions
54 explicit affected versions
47 explicit affected versions
30 explicit affected versions
5 explicit affected versions
29 explicit affected versions
4 explicit affected versions
23 explicit affected versions
11 explicit affected versions
44 explicit affected versions
42 explicit affected versions
28 explicit affected versions
47 explicit affected versions
26 explicit affected versions
26 explicit affected versions
1 explicit affected versions
1 explicit affected versions
23 explicit affected versions
1 explicit affected versions
11 explicit affected versions
37 explicit affected versions
5 explicit affected versions
2 explicit affected versions
6 explicit affected versions
1 explicit affected versions
1 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.
05 / REFERENCES