7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.004 Low
EPSS
Percentile
73.6%
It was discovered that the Linux kernel did not properly clear data
structures on context switches for certain Intel graphics processors. A
local attacker could use this to expose sensitive information.
(CVE-2019-14615)
It was discovered that the HSA Linux kernel driver for AMD GPU devices did
not properly check for errors in certain situations, leading to a NULL
pointer dereference. A local attacker could possibly use this to cause a
denial of service. (CVE-2019-16229)
It was discovered that the Marvell 8xxx Libertas WLAN device driver in the
Linux kernel did not properly check for errors in certain situations,
leading to a NULL pointer dereference. A local attacker could possibly use
this to cause a denial of service. (CVE-2019-16232)
It was discovered that the Renesas Digital Radio Interface (DRIF) driver in
the Linux kernel did not properly initialize data. A local attacker could
possibly use this to expose sensitive information (kernel memory).
(CVE-2019-18786).
It was discovered that the Afatech AF9005 DVB-T USB device driver in the
Linux kernel did not properly deallocate memory in certain error
conditions. A local attacker could possibly use this to cause a denial of
service (kernel memory exhaustion). (CVE-2019-18809)
It was discovered that multiple memory leaks existed in the Marvell WiFi-Ex
Driver for the Linux kernel. A local attacker could possibly use this to
cause a denial of service (kernel memory exhaustion). (CVE-2019-19057)
It was discovered that the Realtek rtlwifi USB device driver in the Linux
kernel did not properly deallocate memory in certain error conditions. A
local attacker could possibly use this to cause a denial of service (kernel
memory exhaustion). (CVE-2019-19063)
It was discovered that the Kvaser CAN/USB driver in the Linux kernel did
not properly initialize memory in certain situations. A local attacker
could possibly use this to expose sensitive information (kernel memory).
(CVE-2019-19947)
Gao Chuan discovered that the SAS Class driver in the Linux kernel
contained a race condition that could lead to a NULL pointer dereference. A
local attacker could possibly use this to cause a denial of service (system
crash). (CVE-2019-19965)
It was discovered that the Datagram Congestion Control Protocol (DCCP)
implementation in the Linux kernel did not properly deallocate memory in
certain error conditions. An attacker could possibly use this to cause a
denial of service (kernel memory exhaustion). (CVE-2019-20096)
Mitchell Frank discovered that the Wi-Fi implementation in the Linux kernel
when used as an access point would send IAPP location updates for stations
before client authentication had completed. A physically proximate attacker
could use this to cause a denial of service. (CVE-2019-5108)
It was discovered that a race condition can lead to a use-after-free while
destroying GEM contexts in the i915 driver for the Linux kernel. A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2020-7053)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 18.04 | noarch | linux-image-5.0.0-1011-oracle | < 5.0.0-1011.16 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-image-5.0.0-1011-oracle-dbgsym | < 5.0.0-1011.16 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-image-5.0.0-1025-aws | < 5.0.0-1025.28 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-aws-5.0-tools-5.0.0-1025 | < 5.0.0-1025.28 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-aws-headers-5.0.0-1025 | < 5.0.0-1025.28 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-buildinfo-5.0.0-1025-aws | < 5.0.0-1025.28 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-headers-5.0.0-1025-aws | < 5.0.0-1025.28 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-image-5.0.0-1025-aws-dbgsym | < 5.0.0-1025.28 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-modules-5.0.0-1025-aws | < 5.0.0-1025.28 | UNKNOWN |
Ubuntu | 18.04 | noarch | linux-modules-extra-5.0.0-1025-aws | < 5.0.0-1025.28 | UNKNOWN |
ubuntu.com/security/CVE-2019-14615
ubuntu.com/security/CVE-2019-16229
ubuntu.com/security/CVE-2019-16232
ubuntu.com/security/CVE-2019-18786
ubuntu.com/security/CVE-2019-18809
ubuntu.com/security/CVE-2019-19057
ubuntu.com/security/CVE-2019-19063
ubuntu.com/security/CVE-2019-19947
ubuntu.com/security/CVE-2019-19965
ubuntu.com/security/CVE-2019-20096
ubuntu.com/security/CVE-2019-5108
ubuntu.com/security/CVE-2020-7053
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.004 Low
EPSS
Percentile
73.6%