CVE-2019-2054: High severity Google Android vulnerability
In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-119769499
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.8-1Fixed in 7.2.9-1
Event History
Frequently Asked Questions
What is CVE-2019-2054?
CVE-2019-2054 is a vulnerability in the seccomp implementation prior to kernel version 4.8 that allows for a possible seccomp bypass.
How severe is CVE-2019-2054?
CVE-2019-2054 has a severity level of medium.
What is the impact of CVE-2019-2054?
CVE-2019-2054 could lead to local escalation of privilege with no additional execution privileges needed.
Is user interaction required to exploit CVE-2019-2054?
No, user interaction is not needed for exploitation of CVE-2019-2054.
How can I fix CVE-2019-2054?
To fix CVE-2019-2054, update your kernel to version 4.8 or higher.