The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perf | Jun 17, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libs | Apr 16, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perf | Dec 27, 2019 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 3, 2020 | Nov 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 25, 2019 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade dlm-kmp-default | May 7, 2020 | Nov 25, 2019 |
| Ubuntu | — | Upgrade linux-oemUpgrade linux-lts-xenialUpgrade linux-awsUpgrade linuxUpgrade linux-snapdragonUpgrade linux-raspi2Upgrade linux-gcpUpgrade linux-fipsUpgrade linux-azureUpgrade linux-kvmUpgrade linux-hwe | Nov 19, 2024 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub