CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Input Validation
Summary: an issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the linux kernel through 4.19.13. a local attacker can craft a malicious ioctl function call to overwrite arbitrary kernel memory, resulting in a denial of service or privilege escalation.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-03-21
Last Modified Date: 2019-06-15