The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-devel | Jun 17, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo | Apr 16, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade python-perf | Dec 27, 2019 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Jan 3, 2020 | Nov 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 25, 2019 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-default | May 7, 2020 | Nov 25, 2019 |
| Ubuntu | — | Upgrade linux-raspi2Upgrade linux-hweUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-azureUpgrade linux-kvmUpgrade linux-snapdragonUpgrade linuxUpgrade linux-lts-xenialUpgrade linux-oemUpgrade linux-aws | Nov 19, 2024 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub