CVE-2019-19927 — Out-of-bounds Read in Linux

CWE-125 — Out-of-bounds Read9 documents7 sources
Severity
6.0MEDIUMNVD
EPSS
0.2%
top 57.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Linux KernelDebian LinuxOpensuse Leap
Timeline
PublishedDec 31
Latest updateFeb 8

Description

In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:HExploitability: 0.8 | Impact: 5.2

Affected Packages4 packages

▶Debianlinux/linux_kernel< 5.2.6-1+3
▶debiandebian/linux< linux 5.2.6-1 (bookworm)
▶NVDopensuse/leap15.1

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-wwjm-g2hc-3mhm: In the Linux kernel 5↗2022-05-24
▶
OSV
CVE-2019-19927: In the Linux kernel 5↗2019-12-31
▶

📋Vendor Advisories

2
Red Hat
kernel: Out-of-bounds read in ttm_put_pages in gpu/drm/ttm/ttm_page_alloc.c↗2019-12-31
▶
Debian
CVE-2019-19927: linux - In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubun...↗2019
▶

📄Research Papers

1
arXiv
ReposVul: A Repository-Level High-Quality Vulnerability Dataset↗2024-02-08
▶

💬Community

2
Bugzilla
CVE-2019-19927 kernel: Out-of-bounds read in ttm_put_pages in gpu/drm/ttm/ttm_page_alloc.c↗2020-01-11
▶
Bugzilla
CVE-2019-19927 kernel: Out-of-bounds read in ttm_put_pages in gpu/drm/ttm/ttm_page_alloc.c [fedora-all]↗2020-01-11
▶