VDB
CVE-2019-18683
CVE-2019-18683
PUBLISHED
An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free.
EPSS 0.89% · 76.0th percentile
Risk Scores
EPSS Score
0.89%
76.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | linux-gke-5.0 | 5.0.0-1025.26~18.04.1, 5.0.0-1023.23~18.04.2, 5.0.0-1022.22~18.04.3 |
| Ubuntu:16.04:LTS | linux-aws-hwe | 4.15.0-1052.54~16.04.1, 4.15.0-1054.56~16.04.1, 4.15.0-1056.58~16.04.1 |
| Ubuntu:16.04:LTS | linux-gcp | 4.13.0-1006.9, *, * |
| Ubuntu:20.04:LTS | linux-azure-fde | *, 0, 5.4.0-1063.66+cvm2.2 |
| Ubuntu:18.04:LTS | linux-azure | *, 4.15.0-1014.14, * |
| Ubuntu:16.04:LTS | linux | 4.4.0-148.174, 4.4.0-150.176, 4.4.0-154.181 |
| Ubuntu:Pro:14.04:LTS | linux-aws | 4.4.0-1059.63, 0, 4.4.0-1002.2 |
| Ubuntu:20.04:LTS | linux-gke | 5.4.0-1035.37, 5.4.0-1091.98, 5.4.0-1090.97 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | 6.8.0-2019.20, 0 |
| Ubuntu:18.04:LTS | linux-gcp-5.3 | 0, 5.3.0-1009.10~18.04.1, 5.3.0-1008.9~18.04.1 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | 0, 5.15.0-1073.75 |
| Ubuntu:18.04:LTS | linux-azure-5.3 | 5.3.0-1008.9~18.04.1, 5.3.0-1009.10~18.04.1, 0 |
| Ubuntu:18.04:LTS | linux | 4.13.0-16.19, 4.15.0-10.11, 4.15.0-13.14 |
| Ubuntu:16.04:LTS | linux-snapdragon | 4.4.0-1093.98, 4.4.0-1115.121, 4.4.0-1114.119 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-azure-fips | 4.15.0-1002.2, 0 |
| Ubuntu:18.04:LTS | linux-gcp-edge | 4.18.0-1009.10~18.04.1, 4.18.0-1008.9~18.04.1, 4.18.0-1007.8~18.04.1 |
| Ubuntu:20.04:LTS | linux-raspi2 | 5.3.0-1014.16, 5.3.0-1015.17, 5.3.0-1017.19 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-aws-fips | 4.15.0-2000.4, 0 |
| Ubuntu:18.04:LTS | linux-raspi2 | 4.15.0-1029.31, 4.15.0-1040.43, 4.15.0-1054.58 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-azure-fips | 0, 4.15.0-1002.2 |
…and 29 more
Exploit Intelligence
- sanjana123-cloud/CVE-2019-18683 (github-poc-repo)
- sanjana123-cloud/CVE-2019-18683 (github-poc-repo)
- sanjana123-cloud/CVE-2019-18683 (github-poc-repo)
- sanjana123-cloud/CVE-2019-18683 (github-poc-repo)
- sanjana123-cloud/CVE-2019-18683 (github-poc-repo)
- sanjana123-cloud/CVE-2019-18683 (github-poc-repo)
- sanjana123-cloud/CVE-2019-18683 (github-poc-repo)
- sanjana123-cloud/CVE-2019-18683 (github-poc-repo)
- sanjana123-cloud/CVE-2019-18683 (github-poc-repo)
- sanjana123-cloud/CVE-2019-18683 (github-poc-repo)
…and 30 more exploits
Timeline
- Nov 4, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
- Jan 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 13, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2019-18683 third-party-advisory
- https://www.openwall.com/lists/oss-security/2019/11/02/1 third-party-advisory
- https://lore.kernel.org/lkml/20191103221719.27118-1-alex.popov@linux.com/ third-party-advisory
- https://ubuntu.com/security/notices/USN-4254-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-4254-2 vendor-advisory
- https://ubuntu.com/security/notices/USN-4258-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-4284-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-4287-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-4287-2 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2019-18683 third-party-advisory