CVEvulnerability

CVE-2019-18683

7.0 HIGH Published 2019-11-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-362, CWE-416

Description

An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free.

Affected configurations

• linux linux kernel (>= 3.18 < 4.4.204) • linux linux kernel (>= 4.5 < 4.9.204) • linux linux kernel (>= 4.10 < 4.14.157) • linux linux kernel (>= 4.15 < 4.19.87) • linux linux kernel (>= 4.20 < 5.3.14) • linux linux kernel (>= 5.4 < 5.4.1) • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 19.10 • opensuse leap 15.1 • netapp active iq unified manager • netapp cloud backup • netapp data availability services • netapp e-series santricity os controller (>= 11.0.0 <= 11.70.1) • netapp element software • netapp hci management node • netapp solidfire • netapp steelstore cloud integrated storage • broadcom fabric operating system • netapp a700s firmware • netapp 8300 firmware • netapp 8700 firmware • netapp a400 firmware • netapp h610s firmware • debian debian linux 8.0

Related

Weakness · CWE (2)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
  • CWE-416 Use After Free weakness

References