The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools | Jun 17, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel | Apr 16, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernel | Dec 27, 2019 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-source | Jan 3, 2020 | Nov 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 25, 2019 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | May 7, 2020 | Nov 25, 2019 |
| Ubuntu | — | Upgrade linux-awsUpgrade linuxUpgrade linux-oemUpgrade linux-lts-xenialUpgrade linux-fipsUpgrade linux-raspi2Upgrade linux-snapdragonUpgrade linux-gcpUpgrade linux-hweUpgrade linux-azureUpgrade linux-kvm | Nov 19, 2024 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub