UBUNTU-CVE-2019-2054

Details

In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-119769499

Affected Packages(164 packages)

linux

Ubuntu 18.04 LTS

Fixed in:

4.13.0-16.19

linux

Ubuntu 20.04 LTS

Affected versions:

5.3.0-18.195.3.0-24.26

Fixed in:

5.4.0-9.12

linux

Ubuntu 22.04 LTS

Fixed in:

5.13.0-19.19

linux

Ubuntu Pro 14.04 LTS

Affected versions:

3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.83.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.15+170 more

linux

Ubuntu 16.04 LTS

Affected versions:

4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.114.3.0-5.164.3.0-6.174.3.0-7.184.4.0-10.254.4.0-101.124+84 more

Fixed in:

4.4.0-157.185

linux

Ubuntu 24.10

Fixed in:

6.8.0-31.31

linux

Ubuntu 24.04 LTS

Fixed in:

6.5.0-9.9

linux

Ubuntu 25.04

Fixed in:

6.11.0-8.8

linux-aws

Ubuntu 24.04 LTS

Fixed in:

6.5.0-1008.8

linux-aws

Ubuntu 20.04 LTS

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.11

Fixed in:

5.4.0-1005.5

References

REPORThttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0f3912fd934cdfd03d93f2dc6f064099795bf638 REPORThttps://github.com/GrapheneOS/kernel_google_marlin/commit/bac2f2dde8af50c477b580743deb688db25e9e63 REPORThttps://source.android.com/security/bulletin/2019-05-01 REPORThttps://ubuntu.com/security/CVE-2019-2054 REPORThttps://ubuntu.com/security/notices/USN-4076-1 REPORThttps://ubuntu.com/security/notices/USN-4095-2 REPORThttps://www.cve.org/CVERecord?id=CVE-2019-2054

UBUNTU-CVE-2019-2054

Details

Affected Packages(164 packages)

References

CVSS Analysis

Related

Ecosystems(29)

Timeline