UBUNTU-CVE-2019-9445
Vulnerability Summary
Timeline
Description
In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVSS Metrics
- v3.1•MEDIUM•Score: 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Systems
- ubuntu•linux
all | < 4.4.0-190.220 | < 4.15.0-118.119
- ubuntu•linux-aws
< 4.4.0-1078.82 | < 4.4.0-1114.127 | < 4.15.0-1083.87
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-fips
< 4.15.0-2027.27 | all
- ubuntu•linux-aws-hwe
< 4.15.0-1083.87~16.04.1
- ubuntu•linux-azure
< 4.15.0-1096.106~14.04.1 | < 4.15.0-1096.106~16.04.1 | all
- ubuntu•linux-azure-4.15
< 4.15.0-1096.106
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fips
< 4.15.0-2009.10 | all
- ubuntu•linux-bluefield
all
- ubuntu•linux-fips
< 4.4.0-1046.51 | all | < 4.15.0-1041.46
- ubuntu•linux-gcp
< 4.15.0-1084.95~16.04.1 | all
- ubuntu•linux-gcp-4.15
< 4.15.0-1084.95
- ubuntu•linux-gcp-edge
all
- ubuntu•linux-gcp-fips
all
- ubuntu•linux-gke
all
- ubuntu•linux-gke-4.15
< 4.15.0-1070.73
- ubuntu•linux-gke-5.0
< 5.0.0-1032.33
- ubuntu•linux-hwe
< 4.15.0-118.119~16.04.1 | < 5.3.0-26.28~18.04.1
- ubuntu•linux-hwe-edge
all | < 5.3.0-19.20~18.04.2
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-kvm
< 4.4.0-1080.87 | < 4.15.0-1075.76
- ubuntu•linux-lts-xenial
< 4.4.0-190.220~14.04.1
- ubuntu•linux-nvidia
all
- ubuntu•linux-oem
< 4.15.0-1097.107
- ubuntu•linux-oem-osp1
< 5.0.0-1043.48
- ubuntu•linux-oracle
< 4.15.0-1054.58~16.04.1 | < 4.15.0-1054.58
- ubuntu•linux-oracle-5.0
all
- ubuntu•linux-raspi-realtime
all
- ubuntu•linux-raspi2
< 4.4.0-1139.148 | < 4.15.0-1071.75 | all
- ubuntu•linux-realtime
all
- ubuntu•linux-riscv
all
- ubuntu•linux-snapdragon
< 4.4.0-1143.152 | < 4.15.0-1087.95
References (6)
- https://ubuntu.com/security/CVE-2019-9445
- https://git.kernel.org/linus/720db068634c91553a8e1d9a0fcd8c7050e06d2b
- https://source.android.com/security/bulletin/pixel/2019-09-01
- https://ubuntu.com/security/notices/USN-4526-1
- https://ubuntu.com/security/notices/USN-4527-1
- https://www.cve.org/CVERecord?id=CVE-2019-9445