CVE-2019-9454 - kernel: out of bounds write in i2c driver leads to local escalation of privilege

Back Back to CVE browser

MEDIUM

kernel: out of bounds write in i2c driver leads to local escalation of privilege

Published Sep 6, 2019

6.7

MEDIUM

CVSS 3.1

EPSS 0.18%

Description

In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Affected products

Vendor n/a Product Android Default
n/a
- Version
  Android kernel
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Android

n/a

Version	Status	Constraints
Android kernel	affected	-

Red Hat Enterprise Linux 7

kernel-0:3.10.0-1160.el7

Fixed · RHSA-2020:4060
Red Hat Enterprise Linux 7

kernel-alt-0:4.14.0-115.21.2.el7a

Fixed · RHSA-2020:2104
Red Hat Enterprise Linux 7

kernel-rt-0:3.10.0-1160.rt56.1131.el7

Fixed · RHSA-2020:4062
Red Hat Enterprise Linux 7.4 Advanced Update Support

kernel-0:3.10.0-693.81.1.el7

Fixed · RHSA-2020:5430
Red Hat Enterprise Linux 7.4 Telco Extended Update Support

kernel-0:3.10.0-693.81.1.el7

Fixed · RHSA-2020:5430
Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions

kernel-0:3.10.0-693.81.1.el7

Fixed · RHSA-2020:5430
Red Hat Enterprise Linux 7.6 Extended Update Support

kernel-0:3.10.0-957.65.1.el7

Fixed · RHSA-2020:5656
Red Hat Enterprise Linux 7.7 Extended Update Support

kernel-0:3.10.0-1062.40.1.el7

Fixed · RHSA-2020:5206
Red Hat Virtualization 4.2 for Red Hat Enterprise Linux 7.6 EUS

kernel-0:3.10.0-957.65.1.el7

Fixed · RHSA-2020:5656
Red Hat Enterprise Linux 5

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Out of support scope
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise MRG 2

kernel-rt

Will not fix

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	kernel-0:3.10.0-1160.el7	Fixed	RHSA-2020:4060
Red Hat Enterprise Linux 7	kernel-alt-0:4.14.0-115.21.2.el7a	Fixed	RHSA-2020:2104
Red Hat Enterprise Linux 7	kernel-rt-0:3.10.0-1160.rt56.1131.el7	Fixed	RHSA-2020:4062
Red Hat Enterprise Linux 7.4 Advanced Update Support	kernel-0:3.10.0-693.81.1.el7	Fixed	RHSA-2020:5430
Red Hat Enterprise Linux 7.4 Telco Extended Update Support	kernel-0:3.10.0-693.81.1.el7	Fixed	RHSA-2020:5430
Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions	kernel-0:3.10.0-693.81.1.el7	Fixed	RHSA-2020:5430
Red Hat Enterprise Linux 7.6 Extended Update Support	kernel-0:3.10.0-957.65.1.el7	Fixed	RHSA-2020:5656
Red Hat Enterprise Linux 7.7 Extended Update Support	kernel-0:3.10.0-1062.40.1.el7	Fixed	RHSA-2020:5206
Red Hat Virtualization 4.2 for Red Hat Enterprise Linux 7.6 EUS	kernel-0:3.10.0-957.65.1.el7	Fixed	RHSA-2020:5656
Red Hat Enterprise Linux 5	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise MRG 2	kernel-rt	Will not fix	n/a

Remediation

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (6)

https://access.redhat.com/security/cve/CVE-2019-9454
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1818818
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18828
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9454
https://source.android.com/security/bulletin/pixel/2019-09-01
x_refsource_MISCPatchVendor Advisory
https://www.cve.org/CVERecord?id=CVE-2019-9454

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2019-9454		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1818818		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18828		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9454
https://source.android.com/security/bulletin/pixel/2019-09-01		x_refsource_MISCPatchVendor Advisory
https://www.cve.org/CVERecord?id=CVE-2019-9454