CVE-2018-20669: Input Validation
An issue where a provided address with accessok() is not checked was discovered in i915gemexecbuffer2ioctl in drivers/gpu/drm/i915/i915gemexecbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-20669?
CVE-2018-20669 has a high severity rating due to the potential for local attackers to exploit the vulnerability to overwrite arbitrary kernel memory.
How do I fix CVE-2018-20669?
To fix CVE-2018-20669, upgrade your Linux kernel to version 4.19.14 or later, or apply patches provided by your distribution.
Which Linux kernel versions are affected by CVE-2018-20669?
CVE-2018-20669 affects Linux kernel versions through 4.19.13, specifically versions 4.13 to 4.19.129 and also 4.20 to 5.0.
Can CVE-2018-20669 be exploited remotely?
No, CVE-2018-20669 requires local access to the system, meaning an attacker must have local user privileges to exploit this vulnerability.
What types of systems are vulnerable to CVE-2018-20669?
Systems running vulnerable versions of the Linux kernel, including distributions like Ubuntu and Debian, as well as specific devices like NetApp appliances, are susceptible to CVE-2018-20669.