CVE-2019-12817
First published: Fri Jun 14 2019(Updated: )
A flaw was found in the way the Linux kernel's memory subsystem on certain 64-bit PowerPC with the hash page table MMU handled memory above 512TB. A local, unprivileged user could use this flaw to escalate their privileges on the system. Upstream commit that introduced this issue: <a href="https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f384796c40dc">https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f384796c40dc</a> Upstream fix: <a href="https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca72d88378b2f2444d3ec145dd442d449d3fefbc">https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca72d88378b2f2444d3ec145dd442d449d3fefbc</a>
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ubuntu/linux | <4.18.0-24.25 | 4.18.0-24.25 |
| ubuntu/linux | <5.0.0-19.20 | 5.0.0-19.20 |
| ubuntu/linux | <5.2~ | 5.2~ |
| ubuntu/linux-aws | <5.2~ | 5.2~ |
| ubuntu/linux-aws-hwe | <5.2~ | 5.2~ |
| ubuntu/linux-azure | <5.2~ | 5.2~ |
| ubuntu/linux-azure-edge | <5.2~ | 5.2~ |
| ubuntu/linux-euclid | <5.2~ | 5.2~ |
| ubuntu/linux-flo | <5.2~ | 5.2~ |
| ubuntu/linux-gcp | <5.2~ | 5.2~ |
| ubuntu/linux-gcp-edge | <5.2~ | 5.2~ |
| ubuntu/linux-gke | <5.2~ | 5.2~ |
| ubuntu/linux-goldfish | <5.2~ | 5.2~ |
| ubuntu/linux-grouper | <5.2~ | 5.2~ |
| ubuntu/linux-hwe | <4.18.0-24.25~18.04.1 | 4.18.0-24.25~18.04.1 |
| ubuntu/linux-hwe | <5.2~ | 5.2~ |
| ubuntu/linux-hwe-edge | <4.18.0-24.25~18.04.1 | 4.18.0-24.25~18.04.1 |
| ubuntu/linux-hwe-edge | <5.2~ | 5.2~ |
| ubuntu/linux-kvm | <5.2~ | 5.2~ |
| ubuntu/linux-lts-trusty | <5.2~ | 5.2~ |
| ubuntu/linux-lts-utopic | <5.2~ | 5.2~ |
| ubuntu/linux-lts-vivid | <5.2~ | 5.2~ |
| ubuntu/linux-lts-wily | <5.2~ | 5.2~ |
| ubuntu/linux-lts-xenial | <5.2~ | 5.2~ |
| ubuntu/linux-maguro | <5.2~ | 5.2~ |
| ubuntu/linux-mako | <5.2~ | 5.2~ |
| ubuntu/linux-manta | <5.2~ | 5.2~ |
| ubuntu/linux-oem | <5.2~ | 5.2~ |
| ubuntu/linux-oracle | <5.2~ | 5.2~ |
| ubuntu/linux-raspi2 | <5.2~ | 5.2~ |
| ubuntu/linux-snapdragon | <5.2~ | 5.2~ |
| debian/linux | 5.10.218-1 5.10.223-1 6.1.94-1 6.1.99-1 6.10.3-1 6.10.4-1 | |
| Ubuntu | =18.04 | |
| Ubuntu | =18.10 | |
| Ubuntu | =19.04 | |
| Linux Kernel | <5.1.15 | |
| Red Hat Fedora | =29 | |
| Red Hat Fedora | =30 | |
| Debian Linux | =9.0 | |
| Debian Linux | =10.0 | |
| SUSE Linux | =15.1 | |
| Red Hat Enterprise Linux | =8.0 | |
| Red Hat Enterprise Linux Server EUS | =8.1 | |
| Red Hat Enterprise Linux Server EUS | =8.2 | |
| Red Hat Enterprise Linux Server EUS | =8.4 | |
| Red Hat Enterprise Linux Server | =8.2 | |
| Red Hat Enterprise Linux Server | =8.4 | |
| Red Hat Enterprise Linux Server | =8.2 | |
| Red Hat Enterprise Linux Server | =8.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html
- http://www.openwall.com/lists/oss-security/2019/06/24/5
- http://www.securityfocus.com/bid/108884
- https://access.redhat.com/errata/RHSA-2019:2703
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.15
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca72d88378b2f2444d3ec145dd442d449d3fefbc
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTLN3KQYEEWWAJYA4BUYYDMWWXCJQNV2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSKLL2374YGFQR6LSVCFGTTCRGBTLAWZ/
- https://seclists.org/bugtraq/2019/Aug/13
- https://support.f5.com/csp/article/K12876166
- https://support.f5.com/csp/article/K12876166?utm_source=f5support&utm_medium=RSS
- https://usn.ubuntu.com/4031-1/
- https://www.debian.org/security/2019/dsa-4495
- https://support.f5.com/csp/article/K12876166?utm_source=f5support&amp;utm_medium=RSS
- https://launchpad.net/bugs/cve/CVE-2019-12817
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f384796c40dc
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1720341
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1723697
- https://seclists.org/oss-sec/2019/q2/200
- https://bugzilla.redhat.com/show_bug.cgi?id=1720616
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OTLN3KQYEEWWAJYA4BUYYDMWWXCJQNV2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSKLL2374YGFQR6LSVCFGTTCRGBTLAWZ/
- https://support.f5.com/csp/article/K12876166?utm_source=f5support&%3Butm_medium=RSS
- https://security-tracker.debian.org/tracker/CVE-2019-12817
- https://ubuntu.com/security/notices/USN-4031-1
- https://www.cve.org/CVERecord?id=CVE-2019-12817
- https://nvd.nist.gov/vuln/detail/CVE-2019-12817
- https://git.kernel.org/linus/f384796c40dc55b3dba25e0ee9c1afd98c6d24d1
- https://git.kernel.org/linus/ca72d88378b2f2444d3ec145dd442d449d3fefbc
- https://ubuntu.com/security/CVE-2019-12817
Frequently Asked Questions
What is the severity of CVE-2019-12817?
CVE-2019-12817 has a high severity rating due to the potential for local privilege escalation.
How do I fix CVE-2019-12817?
To fix CVE-2019-12817, update the Linux kernel to versions 4.18.0-24.25, 5.0.0-19.20, or higher.
What systems are affected by CVE-2019-12817?
CVE-2019-12817 affects certain 64-bit PowerPC systems running specific versions of the Linux kernel.
Can a remote attacker exploit CVE-2019-12817?
No, CVE-2019-12817 can only be exploited by a local, unprivileged user.
Are there existing patches for CVE-2019-12817?
Yes, patches for CVE-2019-12817 are included in the recommended kernel updates for affected systems.
- agent/type
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-12817
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- collector/usn-cve
- source/Ubuntu
- agent/software-canonical-lookup
- agent/references
- collector/security-tracker-debian
- source/Debian
- agent/trending
- agent/source
- agent/author
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- package-manager/ubuntu
- package-manager/debian
- vendor/canonical
- canonical/ubuntu
- version/ubuntu/18.04
- version/ubuntu/18.10
- version/ubuntu/19.04
- vendor/linux
- canonical/linux kernel
- vendor/fedoraproject
- canonical/red hat fedora
- version/red hat fedora/29
- version/red hat fedora/30
- vendor/debian
- canonical/debian linux
- version/debian linux/9.0
- version/debian linux/10.0
- vendor/opensuse
- canonical/suse linux
- version/suse linux/15.1
- vendor/redhat
- canonical/red hat enterprise linux
- version/red hat enterprise linux/8.0
- canonical/red hat enterprise linux server eus
- version/red hat enterprise linux server eus/8.1
- version/red hat enterprise linux server eus/8.2
- version/red hat enterprise linux server eus/8.4
- canonical/red hat enterprise linux server
- version/red hat enterprise linux server/8.2
- version/red hat enterprise linux server/8.4