CVE-2019-12817
published 2019-06-25CVE-2019-12817: arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one…
PriorityP430high7CVSS 3.1
AVLACHPRLUINSUCHIHAH
EPSS
0.39%
31.5th percentile
arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | linux | < linux 5.2.6-1 (bookworm) | linux 5.2.6-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| linux | linux_kernel | < 5.1.15 | 5.1.15 |
| linux | linux_kernel | >= 0 < 5.2.6-1 | 5.2.6-1 |
| linux | linux_kernel | >= 0 < 5.2.6-1 | 5.2.6-1 |
| linux | linux_kernel | >= 0 < 5.2.6-1 | 5.2.6-1 |
| linux | linux_kernel | >= 0 < 5.2.6-1 | 5.2.6-1 |
| opensuse | leap | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_server_aus | — | — |
| redhat | enterprise_linux_server_aus | — | — |
| redhat | enterprise_linux_server_tus | — | — |
| redhat | enterprise_linux_server_tus | — | — |
CVSS provenance
nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
osv7.0HIGH
vendor_debian7.0HIGH
vendor_redhat7.0HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-47g7-45f4-j83m: arch/powerpc/mm/mmu_context_book3s64
ghsa_unreviewed·2022-05-24
CVE-2019-12817 [HIGH] CWE-119 GHSA-47g7-45f4-j83m: arch/powerpc/mm/mmu_context_book3s64
arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.
Kernel
Merge branch 'fixes' into next
kernel_security·2019-07-01·CVSS 7.0
CVE-2019-12817 [HIGH] Merge branch 'fixes' into next
Merge branch 'fixes' into next
Merge our fixes branch into next, this brings in a number of commits
that fix bugs we don't want to hit in next, in particular the fix for
CVE-2019-12817.
Kernel
Merge tag 'powerpc-5.2-6' into fixes
kernel_security·2019-07-01·CVSS 7.0
CVE-2019-12817 [HIGH] Merge tag 'powerpc-5.2-6' into fixes
Merge tag 'powerpc-5.2-6' into fixes
This merges the commits that were the fix for CVE-2019-12817, which was
developed under embargo. They have already been merged by Linus
Merge them into fixes now so that this branch contains all the fixes for
this release.
OSV
CVE-2019-12817: arch/powerpc/mm/mmu_context_book3s64
osv·2019-06-25·CVSS 7.0
CVE-2019-12817 [HIGH] CVE-2019-12817: arch/powerpc/mm/mmu_context_book3s64
arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.
Kernel
Merge tag 'powerpc-5.2-6' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux
kernel_security·2019-06-24·CVSS 7.0
CVE-2019-12817 [HIGH] Merge tag 'powerpc-5.2-6' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux
Merge tag 'powerpc-5.2-6' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux
Pull powerpc fixes from Michael Ellerman:
"One fix for a bug in our context id handling on 64-bit hash CPUs,
which can lead to unrelated processes being able to read/write to each
other's virtual memory. See the commit for full details.
That is the fix for CVE-2019-12817.
This also adds a kernel selftest for the bug"
* tag 'powerpc-5.2-6' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
selftests/powerpc: Add test of fork with mapping above 512TB
powerpc/mm/64s/hash: Reallocate context ids on fork
Red Hat
kernel: ppc: unrelated processes being able to read/write to each other's virtual memory
vendor_redhat·2019-06-24·CVSS 7.0
CVE-2019-12817 [HIGH] CWE-119 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory
kernel: ppc: unrelated processes being able to read/write to each other's virtual memory
arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.
A flaw was found in the way the Linux kernel's memory subsystem on certain 64-bit PowerPCs with the hash page table MMU handled memory above 512TB. A local, unprivileged user could use this flaw to escalate their privileges on the system.
Statement: Red Hat Product Security is aware of this issue. Updates will be released as they become available.
Package: kernel (Red Hat Enterprise Linux 5) - Not affected
Package: kernel (Re
Ubuntu
Linux kernel vulnerability
vendor_ubuntu·2019-06-24
CVE-2019-12817 Linux kernel vulnerability
Title: Linux kernel vulnerability
Summary: 64-Bit PowerPC systems could be made to expose sensitive information.
It was discovered that the Linux kernel did not properly separate certain
memory mappings when creating new userspace processes on 64-bit Power
(ppc64el) systems. A local attacker could use this to access memory
contents or cause memory corruption of other processes on the system.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic
Debian
CVE-2019-12817: linux - arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for pow...
vendor_debian·2019·CVSS 7.0
CVE-2019-12817 [HIGH] CVE-2019-12817: linux - arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for pow...
arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.
Scope: local
bookworm: resolved (fixed in 5.2.6-1)
bullseye: resolved (fixed in 5.2.6-1)
forky: resolved (fixed in 5.2.6-1)
sid: resolved (fixed in 5.2.6-1)
trixie: resolved (fixed in 5.2.6-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory [fedora-all]
bugzilla·2019-06-25·CVSS 7.0
CVE-2019-12817 [HIGH] CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory [fedora-all]
CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this is
Bugzilla
CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory
bugzilla·2019-06-14·CVSS 7.0
CVE-2019-12817 [HIGH] CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory
CVE-2019-12817 kernel: ppc: unrelated processes being able to read/write to each other's virtual memory
A flaw was found in the way the Linux kernel's memory subsystem on certain
64-bit PowerPC with the hash page table MMU handled memory above 512TB. A local,
unprivileged user could use this flaw to escalate their privileges on the system.
Upstream commit that introduced this issue:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f384796c40dc
Upstream fix:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca72d88378b2f2444d3ec145dd442d449d3fefbc
Discussion:
*** Bug 1720341 has been marked as a duplicate of this bug. ***
---
Note from the reporter:
This bug only affects machines using 64-bit CPUs with the hash page table MMU,
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.htmlhttp://www.openwall.com/lists/oss-security/2019/06/24/5http://www.securityfocus.com/bid/108884https://access.redhat.com/errata/RHSA-2019:2703https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.15https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca72d88378b2f2444d3ec145dd442d449d3fefbchttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OTLN3KQYEEWWAJYA4BUYYDMWWXCJQNV2/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSKLL2374YGFQR6LSVCFGTTCRGBTLAWZ/https://seclists.org/bugtraq/2019/Aug/13https://support.f5.com/csp/article/K12876166https://support.f5.com/csp/article/K12876166?utm_source=f5support&%3Butm_medium=RSShttps://usn.ubuntu.com/4031-1/https://www.debian.org/security/2019/dsa-4495http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.htmlhttp://www.openwall.com/lists/oss-security/2019/06/24/5http://www.securityfocus.com/bid/108884https://access.redhat.com/errata/RHSA-2019:2703https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.15https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca72d88378b2f2444d3ec145dd442d449d3fefbchttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OTLN3KQYEEWWAJYA4BUYYDMWWXCJQNV2/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSKLL2374YGFQR6LSVCFGTTCRGBTLAWZ/https://seclists.org/bugtraq/2019/Aug/13https://support.f5.com/csp/article/K12876166https://support.f5.com/csp/article/K12876166?utm_source=f5support&%3Butm_medium=RSShttps://usn.ubuntu.com/4031-1/https://www.debian.org/security/2019/dsa-4495
2019-06-25
Published