CVE-2019-2182 - In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel

CVE-2019-2182

Summary

In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
https://source.android.com/security/bulletin/pixel/2019-09-01
https://www.debian.org/security/2020/dsa-4698

Vulnerable Configurations

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

debian	DSA-4698
misc	https://source.android.com/security/bulletin/pixel/2019-09-01
mlist	[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update

Last major update

24-08-2020 - 17:37

Published

06-09-2019 - 22:15

Last modified

24-08-2020 - 17:37