CVE-2017-13166: High severity Google Android vulnerability
A bug in the 32-bit compatibility layer of the ioctl handling code of the v4l2 video driver in the Linux kernel has been found. A memory protection mechanism ensuring that user-provided buffers always point to a userspace memory were disabled, allowing destination address to be in a kernel space. This flaw could be exploited by an attacker to overwrite a kernel memory from an unprivileged userspace process, leading to privilege escalation.
References:
https://source.android.com/security/bulletin/pixel/2017-12-01#kernel-components
https://nvd.nist.gov/vuln/detail/CVE-2017-13166
An upstream fix:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a1dfb4c48cc1e64eeb7800a27c66a6f7e88d075a
Other sources
An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167.
— Ubuntu
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1 - Upgrade
Upgrade
Android (kernel v4l2 ioctl 32-bit compatibility layer)to a version that resolves this vulnerability.Patch Android ID A-34624167
Event History
Frequently Asked Questions
What is the severity of CVE-2017-13166?
The severity of CVE-2017-13166 is classified as high due to the potential for privilege escalation on affected systems.
How do I fix CVE-2017-13166?
To fix CVE-2017-13166, upgrade to the appropriate patched kernel versions provided by your operating system vendor.
Which software is affected by CVE-2017-13166?
CVE-2017-13166 affects various versions of the Linux kernel, particularly the 32-bit compatibility layer.
Can CVE-2017-13166 be exploited remotely?
CVE-2017-13166 is not directly exploitable remotely as it requires local user access to trigger the vulnerability.
What types of systems are impacted by CVE-2017-13166?
CVE-2017-13166 impacts systems running vulnerable versions of the Linux kernel, including various Linux distributions like Ubuntu and Debian.