Bug 1819133 (CVE-2019-2182)

Summary:	CVE-2019-2182 kernel: possible execution path in MMU code leads to local escalation of privilege
Product:	[Other] Security Response	Reporter:	msiddiqu
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	acaringi, airlied, allarkin, bhu, blc, brdeoliv, bskeggs, dhoward, dvlasenk, esammons, fhrbata, hdegoede, hkrzesin, iboverma, ichavero, itamar, jarodwilson, jeremy, jforbes, jglisse, jlelli, john.j5live, jonathan, josef, jross, jshortt, jstancek, jwboyer, kernel-maint, kernel-mgr, labbott, lgoncalv, linville, masami256, matt, mchehab, mcressma, mjg59, mlangsdo, nmurray, qzhao, rt-maint, rvrbovsk, steved, vdronov, williams
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A vulnerability was found in MMU code in the Linux kernel. An execution path leaving some kernel text and rodata pages writable leading to local escalation of privilege. User interaction is not needed for this exploitation.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-04-28 16:09:57 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1819134, 1826751, 1826752
Bug Blocks:	1750356, 1819135

Description msiddiqu 2020-03-31 09:52:35 UTC

A vulnerability was found in MMU code in kernel where there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Upstream commit:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=15122ee2c515a253b0c66a3e618bc7ebe35105eb

References:
https://source.android.com/security/bulletin/pixel/2019-09-01

Comment 1 msiddiqu 2020-03-31 09:53:48 UTC

Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 1819134]

Comment 2 Justin M. Forbes 2020-03-31 13:54:06 UTC

This was fixed for Fedora with the 4.16 stable kernel rebases.

Comment 8 Alex 2020-04-22 13:44:54 UTC

Mitigation:

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.