VDB
CVE-2019-18683
CVE-2019-18683
PUBLISHED
CVSS 7 HIGH
An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free.
EPSS 0.99% · 61.0th percentile
Risk Scores
CVSS 3.1
7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.99%
61.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | linux-gke-5.0 | 5.0.0-1025.26~18.04.1, 5.0.0-1023.23~18.04.2, 5.0.0-1022.22~18.04.3 |
| Ubuntu:16.04:LTS | linux-aws-hwe | 4.15.0-1052.54~16.04.1, 4.15.0-1054.56~16.04.1, 4.15.0-1056.58~16.04.1 |
| Ubuntu:16.04:LTS | linux-gcp | 4.13.0-1006.9, *, * |
| Ubuntu:20.04:LTS | linux-azure-fde | *, 0, 5.4.0-1063.66+cvm2.2 |
| Ubuntu:18.04:LTS | linux-azure | *, 4.15.0-1014.14, * |
| Ubuntu:16.04:LTS | linux | 4.4.0-148.174, 4.4.0-150.176, 4.4.0-154.181 |
| Ubuntu:Pro:14.04:LTS | linux-aws | 4.4.0-1059.63, 0, 4.4.0-1002.2 |
| Ubuntu:20.04:LTS | linux-gke | 5.4.0-1035.37, 5.4.0-1091.98, 5.4.0-1090.97 |
| Ubuntu:24.04:LTS | linux-raspi-realtime | 6.8.0-2019.20, 0 |
| Ubuntu:18.04:LTS | linux-gcp-5.3 | 0, 5.3.0-1009.10~18.04.1, 5.3.0-1008.9~18.04.1 |
| Ubuntu:22.04:LTS | linux-intel-iot-realtime | 0, 5.15.0-1073.75 |
| Ubuntu:18.04:LTS | linux-azure-5.3 | 5.3.0-1008.9~18.04.1, 5.3.0-1009.10~18.04.1, 0 |
| Ubuntu:18.04:LTS | linux | 4.13.0-16.19, 4.15.0-10.11, 4.15.0-13.14 |
| Ubuntu:16.04:LTS | linux-snapdragon | 4.4.0-1093.98, 4.4.0-1115.121, 4.4.0-1114.119 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-azure-fips | 4.15.0-1002.2, 0 |
| Ubuntu:18.04:LTS | linux-gcp-edge | 4.18.0-1009.10~18.04.1, 4.18.0-1008.9~18.04.1, 4.18.0-1007.8~18.04.1 |
| Ubuntu:20.04:LTS | linux-raspi2 | 5.3.0-1014.16, 5.3.0-1015.17, 5.3.0-1017.19 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-aws-fips | 4.15.0-2000.4, 0 |
| Ubuntu:18.04:LTS | linux-raspi2 | 4.15.0-1029.31, 4.15.0-1040.43, 4.15.0-1054.58 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-azure-fips | 0, 4.15.0-1002.2 |
…and 29 more
Timeline
- Nov 4, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 27, 2021 EPSS Score
- Dec 30, 2021 EPSS Score
- Mar 3, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Jul 7, 2022 EPSS Score
- Nov 11, 2022 EPSS Score
- Jan 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 20, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2019-18683 third-party-advisory
- https://www.openwall.com/lists/oss-security/2019/11/02/1 third-party-advisory
- https://lore.kernel.org/lkml/20191103221719.27118-1-alex.popov@linux.com/ third-party-advisory
- https://ubuntu.com/security/notices/USN-4254-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-4254-2 vendor-advisory
- https://ubuntu.com/security/notices/USN-4258-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-4284-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-4287-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-4287-2 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2019-18683 third-party-advisory