UBUNTU-CVE-2019-10142

Description

A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an ioctl was incorrectly validated and used in size calculations for the page size calculation. An attacker can use this flaw to crash the system, corrupt memory, or create other adverse security affects.

CVSS Metrics

• v3.0•HIGH•Score: 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

• ubuntu•linux

  all | < 4.4.0-157.185

• ubuntu•linux-aws

  < 4.4.0-1054.58

• ubuntu•linux-aws-fips

  < 4.15.0-2018.18 | all

• ubuntu•linux-azure

  < 4.15.0-1059.64~14.04.1

• ubuntu•linux-azure-fde

  all

• ubuntu•linux-azure-fips

  < 4.15.0-2006.7 | all

• ubuntu•linux-bluefield

  all

• ubuntu•linux-fips

  < 4.4.0-1015.20

• ubuntu•linux-gcp-fips

  all

• ubuntu•linux-gke

  all

• ubuntu•linux-intel-iot-realtime

  all

• ubuntu•linux-lts-xenial

  < 4.4.0-164.192~14.04.1

• ubuntu•linux-nvidia

  all

• ubuntu•linux-raspi-realtime

  all

• ubuntu•linux-raspi2

  all

• ubuntu•linux-realtime

  all

• ubuntu•linux-riscv

  all | all

References (4)

• https://ubuntu.com/security/CVE-2019-10142
• https://www.openwall.com/lists/oss-security/2019/05/22/5
• https://ubuntu.com/security/notices/USN-4076-1
• https://www.cve.org/CVERecord?id=CVE-2019-10142