The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools | Jun 17, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-devel | Apr 16, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade perf | Dec 27, 2019 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headers | Jan 3, 2020 | Nov 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 25, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-default | May 7, 2020 | Nov 25, 2019 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-snapdragonUpgrade linux-azureUpgrade linux-hweUpgrade linux-raspi2Upgrade linuxUpgrade linux-lts-xenialUpgrade linux-oemUpgrade linux-aws | Nov 19, 2024 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub