CVE-2019-2054
Published: 8 May 2019
In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-119769499
From the Ubuntu Security Team
It was discovered that the Linux kernel on ARM processors allowed a tracing process to modify a syscall after a seccomp decision had been made on that syscall. A local attacker could possibly use this to bypass seccomp restrictions.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
linux Launchpad, Ubuntu, Debian |
upstream |
Released
(4.8~rc1)
|
| xenial |
Released
(4.4.0-157.185)
|
|
| bionic |
Not vulnerable
(4.13.0-16.19)
|
|
| cosmic |
Not vulnerable
(4.15.0-20.21)
|
|
| disco |
Not vulnerable
(4.18.0-10.11)
|
|
|
Patches: Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 |
||
|
linux-lts-trusty Launchpad, Ubuntu, Debian |
upstream |
Released
(4.8~rc1)
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
|
linux-goldfish Launchpad, Ubuntu, Debian |
upstream |
Released
(4.8~rc1)
|
| xenial |
Ignored
(end of life)
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
|
linux-grouper Launchpad, Ubuntu, Debian |
upstream |
Released
(4.8~rc1)
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
|
linux-maguro Launchpad, Ubuntu, Debian |
upstream |
Released
(4.8~rc1)
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
|
linux-mako Launchpad, Ubuntu, Debian |
upstream |
Released
(4.8~rc1)
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| xenial |
Ignored
(abandoned)
|
|
|
linux-flo Launchpad, Ubuntu, Debian |
upstream |
Released
(4.8~rc1)
|
| xenial |
Ignored
(abandoned)
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
|
linux-aws Launchpad, Ubuntu, Debian |
upstream |
Released
(4.8~rc1)
|
| xenial |
Released
(4.4.0-1090.101)
|
|
| bionic |
Not vulnerable
(4.15.0-1001.1)
|
|
| cosmic |
Not vulnerable
(4.15.0-1007.7)
|
|
| disco |
Not vulnerable
(4.18.0-1002.3)
|
|
|
linux-azure Launchpad, Ubuntu, Debian |
upstream |
Released
(4.8~rc1)
|
| xenial |
Not vulnerable
(4.11.0-1009.9)
|
|
| bionic |
Not vulnerable
(4.15.0-1002.2)
|
|
| cosmic |
Not vulnerable
(4.15.0-1009.9)
|
|
| disco |
Not vulnerable
(4.18.0-1003.3)
|
|
|
linux-aws-hwe Launchpad, Ubuntu, Debian |
upstream |
Released
(4.8~rc1)
|
| xenial |
Not vulnerable
(4.15.0-1030.31~16.04.1)
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
|
linux-azure-edge Launchpad, Ubuntu, Debian |
cosmic |
Does not exist
|
| bionic |
Not vulnerable
(4.15.0-1002.2)
|
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Not vulnerable
(4.11.0-1009.9)
|
|
|
linux-euclid Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Ignored
(end of life, was needs-triage)
|
|
|
linux-gcp Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.15.0-1001.1)
|
| cosmic |
Not vulnerable
(4.15.0-1006.6)
|
|
| disco |
Not vulnerable
(4.18.0-1002.3)
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Not vulnerable
(4.10.0-1004.4)
|
|
|
linux-gcp-edge Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.18.0-1004.5~18.04.1)
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Does not exist
|
|
|
linux-gke Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Ignored
(end of standard support)
|
|
|
linux-gke-4.15 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.15.0-1030.32)
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Does not exist
|
|
|
linux-gke-5.0 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.0.0-1011.11~18.04.1)
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Does not exist
|
|
|
linux-hwe Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.18.0-13.14~18.04.1)
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Not vulnerable
(4.8.0-36.36~16.04.1)
|
|
|
linux-hwe-edge Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(5.0.0-15.16~18.04.1)
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Not vulnerable
(4.8.0-36.36~16.04.1)
|
|
|
linux-kvm Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.15.0-1002.2)
|
| cosmic |
Not vulnerable
(4.15.0-1008.8)
|
|
| disco |
Not vulnerable
(4.18.0-1003.3)
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Released
(4.4.0-1052.59)
|
|
|
linux-lts-utopic Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Does not exist
|
|
|
linux-lts-vivid Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Does not exist
|
|
|
linux-lts-wily Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Does not exist
|
|
|
linux-lts-xenial Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Does not exist
|
|
|
linux-manta Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Does not exist
|
|
|
linux-oem Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.15.0-1002.3)
|
| cosmic |
Not vulnerable
(4.15.0-1004.5)
|
|
| disco |
Not vulnerable
(4.15.0-1021.24)
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Ignored
(end of standard support, was needs-triage)
|
|
|
linux-oracle Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.15.0-1007.9)
|
| cosmic |
Not vulnerable
(4.15.0-1007.9)
|
|
| disco |
Not vulnerable
(4.15.0-1007.9)
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Not vulnerable
(4.15.0-1007.9~16.04.1)
|
|
|
linux-raspi2 Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(4.13.0-1005.5)
|
| cosmic |
Not vulnerable
(4.15.0-1010.11)
|
|
| disco |
Not vulnerable
(4.18.0-1005.7)
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Released
(4.4.0-1117.126)
|
|
|
linux-snapdragon Launchpad, Ubuntu, Debian |
bionic |
Released
(4.15.0-1053.57)
|
| cosmic |
Does not exist
|
|
| disco |
Not vulnerable
(5.0.0-1010.10)
|
|
| upstream |
Released
(4.8~rc1)
|
|
| xenial |
Released
(4.4.0-1121.127)
|
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 7.8 |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2054
- https://source.android.com/security/bulletin/2019-05-01
- https://github.com/GrapheneOS/kernel_google_marlin/commit/bac2f2dde8af50c477b580743deb688db25e9e63
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0f3912fd934cdfd03d93f2dc6f064099795bf638
- https://ubuntu.com/security/notices/USN-4076-1
- https://ubuntu.com/security/notices/USN-4095-2
- NVD
- Launchpad
- Debian