CVE-2019-0154

Published: 12 November 2019

Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may allow an authenticated user to potentially enable denial of service via local access.

From the Ubuntu security team

It was discovered that the Intel i915 graphics chipsets could cause a system hang when userspace performed a read from GT memory mapped input output (MMIO) when the product is in certain low power states. A local attacker could use this to cause a denial of service.

Notes

This issue only affects Intel® Graphics Processing Units

this CVE was mitigated with a kernel update. As of 2020-03-06,
there is no indication that a firmware update is required to
fix this.

Priority

Medium

CVSS 3 base score: 5.5

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0154
• https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/TAA_MCEPSC_i915
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00260.html
• https://ubuntu.com/security/notices/USN-4183-1
• https://ubuntu.com/security/notices/USN-4184-1
• https://ubuntu.com/security/notices/USN-4185-1
• https://ubuntu.com/security/notices/USN-4186-1
• https://ubuntu.com/security/notices/USN-4186-2
• NVD
• Launchpad
• Debian