The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Jun 17, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel | Apr 16, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headers | Dec 27, 2019 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-devel | Jan 3, 2020 | Nov 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 25, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-default | May 7, 2020 | Nov 25, 2019 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-raspi2Upgrade linux-hweUpgrade linux-azureUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-snapdragonUpgrade linux-awsUpgrade linux-oemUpgrade linuxUpgrade linux-lts-xenial | Nov 19, 2024 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub