CVE-2018-9516: Buffer Overflow
A flaw was found in the Linux kernel in the hiddebugeventsread() function in the drivers/hid/hid-debug.c file. A lack of the certain checks may allow a privileged user ("root") to achieve an out-of-bounds write and thus receiving user space buffer corruption.
Other sources
A flaw was found in the Linux kernel in the hiddebugeventsread() function in the drivers/hid/hid-debug.c file. A lack of the certain checks may allow a privileged user ("root") to achieve an out-of-bounds write and thus receiving userspace buffer corruption.
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=717adfdaf14704fd3ec7fa2c04520c0723247eac
Note: this fix introduces another vulnerability CVE-2019-3819/bz1669187 and these both should be fixed.
— Red Hat
In hiddebugeventsread of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-71361580.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.0-1062.rt56.1022.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-1062.el7 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1 - Upgrade
Upgrade
Android kernelto a version that resolves this vulnerability.Fixed in CVE-2019-3819 - Compensating control
Until the upstream fix is applied, restrict privileged access to the HID debug interface (drivers/hid/hid-debug.c) so that non-essential root-level access cannot reach hid_debug_events_read().
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2018-9516?
CVE-2018-9516 is considered to have a high severity due to the potential for user space buffer corruption.
How do I fix CVE-2018-9516?
To fix CVE-2018-9516, upgrade your Linux kernel to the recommended patched versions provided by your distribution.
Which Linux distributions are affected by CVE-2018-9516?
CVE-2018-9516 affects various distributions including Red Hat, Debian, and Ubuntu.
Can CVE-2018-9516 be exploited remotely?
CVE-2018-9516 requires local access as it needs a privileged user (root) to exploit the vulnerability.
What components of the Linux kernel are related to CVE-2018-9516?
CVE-2018-9516 is related to the hid_debug_events_read() function in the drivers/hid/hid-debug.c file.