VDB

CVE-2019-2182

CVE-2019-2182 PUBLISHED CVSS 7.800000190734863 HIGH

In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS 0.22% · 10.9th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.22%
10.9th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-gke-4.154.15.0-1044.46, 4.15.0-1030.32, 4.15.0-1040.42
Ubuntu:16.04:LTSlinux-gcp4.15.0-1019.20~16.04.1, 4.15.0-1018.19~16.04.2, 4.15.0-1017.18~16.04.1
Ubuntu:18.04:LTSlinux-oracle4.15.0-1013.15, 4.15.0-1023.26, 4.15.0-1031.34
Ubuntu:18.04:LTSlinux-gcp-edge4.18.0-1011.12~18.04.1, 4.18.0-1009.10~18.04.1, 4.18.0-1008.9~18.04.1
Ubuntu:Pro:14.04:LTSlinux-azure4.15.0-1071.76~14.04.1, 0, 4.15.0-1030.31~14.04.1
Ubuntu:18.04:LTSlinux-snapdragon4.15.0-1065.72, 0, 4.4.0-1078.83
Ubuntu:Pro:FIPS:18.04:LTSlinux-aws-fips4.15.0-2000.4, 0
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-azure-fips4.15.0-1002.2, 0
Ubuntu:22.04:LTSlinux-realtime0, 5.15.0-1032.35
Ubuntu:Pro:FIPS:18.04:LTSlinux-azure-fips0, 4.15.0-1002.2
Ubuntu:18.04:LTSlinux-oem4.15.0-1038.43, 4.15.0-1035.40, 4.15.0-1063.72
Ubuntu:16.04:LTSlinux-hwe-edge4.8.0-30.32~16.04.1, 4.8.0-32.34~16.04.1, 4.8.0-34.36~16.04.1
Ubuntu:20.04:LTSlinux-raspi25.3.0-1007.8, 0, 5.4.0-1004.4
Ubuntu:20.04:LTSlinux-gke5.4.0-1062.65, 5.4.0-1039.41, 5.4.0-1042.44
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1074.77+cvm1.1, 5.4.0-1076.79+cvm1.1, 5.4.0-1078.81+cvm1.1
Ubuntu:16.04:LTSlinux-hwe4.15.0-50.54~16.04.1, 0, 4.8.0-36.36~16.04.1
Ubuntu:16.04:LTSlinux-azure4.15.0-1056.61, 4.15.0-1057.62, 4.15.0-1060.65
Ubuntu:16.04:LTSlinux-oracle*, 0, 4.15.0-1007.9~16.04.1
Ubuntu:18.04:LTSlinux-kvm4.15.0-1017.17, 4.15.0-1019.19, 4.15.0-1020.20
Ubuntu:18.04:LTSlinux-azure5.0.0-1020.21~18.04.1, 5.0.0-1018.19~18.04.1, 5.0.0-1016.17~18.04.1

…and 13 more

Timeline

  • Sep 6, 2019 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 1, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 3, 2022 EPSS Score
  • Jul 5, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›