UBUNTU-CVE-2019-18675

The Linux kernel through 5.3.13 has a startoffset+size Integer Overflow in cpia2remapbuffer in drivers/media/usb/cpia2/cpia2core.c because cpia2 has its own mmap implementation. This allows local users with /dev/video0 access to obtain read and write permissions on kernel physical pages, which ca...

PT-2018-3349 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.13 Description: The issue is related to an integer overflow in the cpia2 remap buffer function, located in drivers/media/usb/cpia2/cpia2 core.c, which can be exploited to gain read and write access to kernel...