UBUNTU-CVE-2019-2182

Description

In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS Metrics

• v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

• ubuntu•linux

  < 4.15.0-91.92

• ubuntu•linux-aws

  < 4.15.0-1063.67

• ubuntu•linux-aws-5.0

  all

• ubuntu•linux-aws-fips

  < 4.15.0-2018.18 | all

• ubuntu•linux-aws-hwe

  < 4.15.0-1063.67~16.04.1

• ubuntu•linux-azure

  < 4.15.0-1074.79~14.04.1 | < 4.15.0-1075.80 | all

• ubuntu•linux-azure-edge

  all

• ubuntu•linux-azure-fde

  all

• ubuntu•linux-azure-fips

  < 4.15.0-2006.7 | all

• ubuntu•linux-bluefield

  all

• ubuntu•linux-gcp

  < 4.15.0-1058.62 | all

• ubuntu•linux-gcp-edge

  all

• ubuntu•linux-gcp-fips

  all

• ubuntu•linux-gke

  all

• ubuntu•linux-gke-4.15

  < 4.15.0-1055.58

• ubuntu•linux-hwe

  < 4.15.0-91.92~16.04.1

• ubuntu•linux-hwe-edge

  all

• ubuntu•linux-intel-iot-realtime

  all

• ubuntu•linux-kvm

  < 4.15.0-1056.57

• ubuntu•linux-nvidia

  all

• ubuntu•linux-oem

  < 4.15.0-1076.86

• ubuntu•linux-oracle

  < 4.15.0-1035.38~16.04.1 | < 4.15.0-1035.39

• ubuntu•linux-oracle-5.0

  all

• ubuntu•linux-raspi-realtime

  all

• ubuntu•linux-raspi2

  < 4.15.0-1057.61 | all

• ubuntu•linux-realtime

  all

• ubuntu•linux-riscv

  all

• ubuntu•linux-snapdragon

  < 4.15.0-1074.81

References (3)

• https://ubuntu.com/security/CVE-2019-2182
• https://source.android.com/security/bulletin/pixel/2019-09-01
• https://www.cve.org/CVERecord?id=CVE-2019-2182