CVE-2019-0155 Privilege escalation in 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux
An authenticated local attacker can escalate privileges due to insufficient access control in Intel processor graphics subsystems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-0155?
CVE-2019-0155 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 14 Nov 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may allow an authenticated user to potentially enable escalation of privilege via local access.
Which versions are affected by CVE-2019-0155?
It affects 357 products.
Linux distribution packages (40)
kernel Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
kernel-abi-whitelists Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debug Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debug-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debug-devel Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debuginfo-common-i686 Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debuginfo-common-x86_64 Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
kernel-devel Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
kernel-doc Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
kernel-firmware Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
perf Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
perf-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
python-perf Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
python-perf-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:2.6.32-754.24.3.el6 |
kernel Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
kernel-abi-whitelists Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debug Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debug-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debug-devel Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debuginfo-common-i686 Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debuginfo-common-x86_64 Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
kernel-devel Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
kernel-doc Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
kernel-firmware Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
perf Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
perf-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
python-perf Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
python-perf-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:2.6.32-754.24.3.el6 |
kernel Red Hat:enterprise_linux:6::server | All versions | 0:2.6.32-754.24.3.el6 |
kernel-abi-whitelists Red Hat:enterprise_linux:6::server | All versions | 0:2.6.32-754.24.3.el6 |
kernel-bootwrapper Red Hat:enterprise_linux:6::server | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debug Red Hat:enterprise_linux:6::server | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debug-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debug-devel Red Hat:enterprise_linux:6::server | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debuginfo-common-i686 Red Hat:enterprise_linux:6::server | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debuginfo-common-ppc64 Red Hat:enterprise_linux:6::server | All versions | 0:2.6.32-754.24.3.el6 |
kernel-debuginfo-common-s390x Red Hat:enterprise_linux:6::server | All versions | 0:2.6.32-754.24.3.el6 |
Products include Canonical Ubuntu Linux, Intel Atom X5-E3930 Firmware, Intel Atom X5-E3940 Firmware, Intel Atom X7-E3950 Firmware, Intel Celeron G3900 Firmware, Intel Celeron G3900e Firmware and 351 more.
How do I fix CVE-2019-0155?
Apply the vendor's patch.
Is CVE-2019-0155 being exploited?
There is no known exploitation of CVE-2019-0155 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as DEBIAN-CVE-2019-0155, GHSA-8885-wr7g-q9vx, RHSA-2019:3870, RHSA-2019:3871, RHSA-2019:3872, RHSA-2019:3873 and 10 more.