CVE-2019-12881: Null Pointer Dereference

Published Jun 18, 2019

Updated

i915gemuserptrgetpages in drivers/gpu/drm/i915/i915gemuserptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.

Affected Software

2 affected components

Linux Linux kernel=4.15

Canonical Ubuntu Linux=18.04.2

Event History

Jun 18, 2019

CVE Published

via MITRE·10:07 PM

Data Sourced

via MITRE·10:07 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-12881?

The severity of CVE-2019-12881 is high with a CVSS score of 7.8.

Which software is affected by CVE-2019-12881?

The Linux kernel 4.15.0 on Ubuntu 18.04.2 is affected by CVE-2019-12881.

How can a local user exploit CVE-2019-12881?

A local user can exploit CVE-2019-12881 by crafting ioctl calls to /dev/dri/card0.

What is the possible impact of CVE-2019-12881?

The possible impact of CVE-2019-12881 is a denial of service (NULL pointer dereference and BUG) or unspecified other impact.

Are there any references available for CVE-2019-12881?

Yes, here are some references for CVE-2019-12881: [SecurityFocus](http://www.securityfocus.com/bid/108873), [GitHub Gist](https://gist.github.com/oxagast/472866fb2c3d439e10499d7141d0a520), [NetApp Advisory](https://security.netapp.com/advisory/ntap-20190710-0002/)