CVE-2018-20669
Fixed in a distro release EPSS <1%
An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.
Products: linux_kernel, canonical ubuntu_linux, netapp hci_management_node, netapp snapprotect, netapp solidfire, netapp cn1610_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | kernel | 4.14.186-146.268.amzn2 |
| Amazon Linux 2 | kernel-devel | 4.14.186-146.268.amzn2 |
| Amazon Linux 2 | kernel-headers | 4.14.186-146.268.amzn2 |
| Amazon Linux 2 | kernel-livepatch-4.14.186-146.268 | 1.0-0.amzn2 |
| Amazon Linux 2 | kernel-tools | 4.14.186-146.268.amzn2 |
| Amazon Linux 2 | kernel-tools-devel | 4.14.186-146.268.amzn2 |
| Amazon Linux 2 | perf | 4.14.186-146.268.amzn2 |
| Amazon Linux 2 | python-perf | 4.14.186-146.268.amzn2 |
| Debian 12 | linux | 5.2.6-1 |
| Debian 13 | linux | 5.2.6-1 |
| Debian 14 | linux | 5.2.6-1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-default | 4.12.14-95.13.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-source | 4.12.14-95.13.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | kernel-syms | 4.12.14-95.13.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP4 | kernel-default | 4.12.14-95.13.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP5 | kernel-default | 4.12.14-122.57.1 |
| SUSE Linux Enterprise High Availability Extension 15 | kernel-default | 4.12.14-150.14.2 |
| SUSE Linux Enterprise High Availability Extension 15 SP1 | kernel-default | 4.12.14-197.78.1 |
| SUSE Linux Enterprise Live Patching 12 SP4 | kgraft-patch-SLE12-SP4_Update_3 | 1-6.7.1 |
| SUSE Linux Enterprise Live Patching 12 SP5 | kernel-default | 4.12.14-122.57.1 |
| SUSE Linux Enterprise Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_14 | 1-8.3.1 |
| SUSE Linux Enterprise Live Patching 15 | kernel-default | 4.12.14-150.14.2 |
| SUSE Linux Enterprise Live Patching 15 | kernel-livepatch-SLE15_Update_9 | 1-1.9.3 |
| SUSE Linux Enterprise Live Patching 15 SP1 | kernel-default | 4.12.14-197.78.1 |
| SUSE Linux Enterprise Live Patching 15 SP1 | kernel-livepatch-SLE15-SP1_Update_21 | 1-3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-default | 4.12.14-150.14.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-source | 4.12.14-150.14.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | kernel-zfcpdump | 4.12.14-150.14.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-default | 4.12.14-197.78.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-source | 4.12.14-197.78.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-zfcpdump | 4.12.14-197.78.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-docs | 4.12.14-150.14.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-obs-build | 4.12.14-150.14.2 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-source | 4.12.14-150.14.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-syms | 4.12.14-150.14.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | kernel-vanilla | 4.12.14-150.14.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-docs | 4.12.14-197.78.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-obs-build | 4.12.14-197.78.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-source | 4.12.14-197.78.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-syms | 4.12.14-197.78.1 |
| SUSE Linux Enterprise Module for Legacy 15 | kernel-default | 4.12.14-150.14.2 |
| SUSE Linux Enterprise Module for Legacy 15 SP1 | kernel-default | 4.12.14-197.78.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-azure | 4.12.14-5.24.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-source-azure | 4.12.14-5.24.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 | kernel-syms-azure | 4.12.14-5.24.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-azure | 4.12.14-8.58.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-source-azure | 4.12.14-8.58.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 | kernel-syms-azure | 4.12.14-8.58.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-rt | 4.12.14-10.25.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-rt_debug | 4.12.14-10.25.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-source-rt | 4.12.14-10.25.1 |
| SUSE Linux Enterprise Real Time 12 SP5 | kernel-syms-rt | 4.12.14-10.25.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-azure | 4.12.14-6.9.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-default | 4.12.14-95.13.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source | 4.12.14-95.13.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-source-azure | 4.12.14-6.9.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms | 4.12.14-95.13.1 |
| SUSE Linux Enterprise Server 12 SP4 | kernel-syms-azure | 4.12.14-6.9.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-azure | 4.12.14-16.41.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-default | 4.12.14-122.57.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-source | 4.12.14-122.57.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-source-azure | 4.12.14-16.41.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-syms | 4.12.14-122.57.1 |
| SUSE Linux Enterprise Server 12 SP5 | kernel-syms-azure | 4.12.14-16.41.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-azure | 4.12.14-6.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-default | 4.12.14-95.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | 4.12.14-95.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source-azure | 4.12.14-6.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms | 4.12.14-95.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-syms-azure | 4.12.14-6.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-azure | 4.12.14-16.41.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-default | 4.12.14-122.57.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source | 4.12.14-122.57.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source-azure | 4.12.14-16.41.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-syms | 4.12.14-122.57.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-syms-azure | 4.12.14-16.41.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-docs | 4.12.14-95.13.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | kernel-obs-build | 4.12.14-95.13.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | kernel-docs | 4.12.14-122.57.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | kernel-obs-build | 4.12.14-122.57.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | kernel-default | 4.12.14-95.13.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | kernel-default | 4.12.14-122.57.1 |
| SUSE Linux Enterprise Workstation Extension 15 | kernel-default | 4.12.14-150.14.2 |
| SUSE Linux Enterprise Workstation Extension 15 SP1 | kernel-default | 4.12.14-197.78.1 |
| SUSE Real Time Module 15 SP1 | kernel-rt | 4.12.14-14.44.2 |
| SUSE Real Time Module 15 SP1 | kernel-rt_debug | 4.12.14-14.44.2 |
| SUSE Real Time Module 15 SP1 | kernel-source-rt | 4.12.14-14.44.2 |
| SUSE Real Time Module 15 SP1 | kernel-syms-rt | 4.12.14-14.44.2 |
| Ubuntu 16.04 LTS | linux-aws-hwe | 4.15.0-1080.84~16.04.1 |
| Ubuntu 16.04 LTS | linux-azure | 4.15.0-1093.103~16.04.1 |
| Ubuntu 16.04 LTS | linux-gcp | 4.15.0-1081.92~16.04.1 |
| Ubuntu 16.04 LTS | linux-hwe | 4.15.0-115.116~16.04.1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 16.04 LTS | linux-oracle | 4.15.0-1051.55~16.04.1 |
| Ubuntu 18.04 LTS | linux | 4.15.0-115.116 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1080.84 |
| Ubuntu 18.04 LTS | linux-azure | 5.0.0-1014.14~18.04.1 |
| Ubuntu 18.04 LTS | linux-azure-4.15 | 4.15.0-1093.103 |
| Ubuntu 18.04 LTS | linux-gcp | 5.0.0-1020.20~18.04.1 |
| Ubuntu 18.04 LTS | linux-gcp-4.15 | 4.15.0-1081.92 |
| Ubuntu 18.04 LTS | linux-gke-4.15 | 4.15.0-1067.70 |
| Ubuntu 18.04 LTS | linux-hwe | 5.0.0-23.24~18.04.1 |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1072.73 |
| Ubuntu 18.04 LTS | linux-oem | 4.15.0-1094.104 |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1051.55 |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1068.72 |
| Ubuntu 18.04 LTS | linux-snapdragon | 4.15.0-1084.92 |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1093.103~14.04.1 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2025.25 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2007.8 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1039.44 |
| Ubuntu Pro FIPS 18.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-gcp-fips | no fix |
| openSUSE Leap 15.0 | kernel-source | 4.12.14-lp150.12.48.1 |
| openSUSE Leap 15.1 | kernel-debug | 4.12.14-lp151.28.87.2 |
| openSUSE Leap 15.1 | kernel-default | 4.12.14-lp151.28.87.2 |
| openSUSE Leap 15.1 | kernel-docs | 4.12.14-lp151.28.87.1 |
| openSUSE Leap 15.1 | kernel-kvmsmall | 4.12.14-lp151.28.87.2 |
| openSUSE Leap 15.1 | kernel-obs-build | 4.12.14-lp151.28.87.2 |
| openSUSE Leap 15.1 | kernel-obs-qa | 4.12.14-lp151.28.87.2 |
| openSUSE Leap 15.1 | kernel-source | 4.12.14-lp151.28.87.1 |
| openSUSE Leap 15.1 | kernel-syms | 4.12.14-lp151.28.87.1 |
| openSUSE Leap 15.1 | kernel-vanilla | 4.12.14-lp151.28.87.2 |