CVE-2019-10142

Published: 23 May 2019

A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an ioctl was incorrectly validated and used in size calculations for the page size calculation. An attacker can use this flaw to crash the system, corrupt memory, or create other adverse security affects.

From the Ubuntu Security Team

It was discovered that an integer overflow existed in the Freescale (PowerPC) hypervisor manager in the Linux kernel. A local attacker with write access to /dev/fsl-hv could use this to cause a denial of service (system crash) or possibly execute arbitrary code.

Notes

depends on freescale (ppc) only

Only the powerpc-e500mc and powerpc64-emb flavours of the Xenial
powerpc kernel are affected. I'm downgrading the priority to negligible since
no officially supported architectures are affected.

Status

Severity score breakdown

References

• https://www.openwall.com/lists/oss-security/2019/05/22/5
• https://ubuntu.com/security/notices/USN-4076-1
• https://www.cve.org/CVERecord?id=CVE-2019-10142
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10142