CVE-2019-12817 Memory corruption in n/a
Attackers can read or write to other processes' virtual memory via specific mmap operations on affected PowerPC Linux kernels.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-12817?
CVE-2019-12817 is a high-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 25 Jun 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.
Weakness: CWE-787
Which versions are affected by CVE-2019-12817?
It affects 9 products.
Linux distribution packages (1)
kernel-livepatch-SLE15-SP1_Update_1 SUSE:Linux Enterprise Live Patching 15 SP1 | All versions | 2-2.1 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Linux kernel, Opensuse Leap, Redhat Enterprise Linux and 3 more.
How do I fix CVE-2019-12817?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-12817 being exploited?
There is no known exploitation of CVE-2019-12817 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as DEBIAN-CVE-2019-12817, GHSA-47g7-45f4-j83m, SUSE-SU-2019:1769-1, UBUNTU-CVE-2019-12817, USN-4031-1.