PublicDateAtUSN: 2019-05-08
Candidate: CVE-2019-2054
PublicDate: 2019-05-08 17:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2054
 https://source.android.com/security/bulletin/2019-05-01
 https://github.com/GrapheneOS/kernel_google_marlin/commit/bac2f2dde8af50c477b580743deb688db25e9e63
 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0f3912fd934cdfd03d93f2dc6f064099795bf638
 https://ubuntu.com/security/notices/USN-4076-1
 https://ubuntu.com/security/notices/USN-4095-2
Description:
 In the seccomp implementation prior to kernel version 4.8, there is a
 possible seccomp bypass due to seccomp policies that allow the use of
 ptrace. This could lead to local escalation of privilege with no additional
 execution privileges needed. User interaction is not needed for
 exploitation. Product: Android Versions: Android kernel Android ID:
 A-119769499
Ubuntu-Description:
 It was discovered that the Linux kernel on ARM processors allowed a tracing
 process to modify a syscall after a seccomp decision had been made on that
 syscall. A local attacker could possibly use this to bypass seccomp
 restrictions.
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H [7.8 HIGH]

Patches_linux:
 break-fix: - 0f3912fd934cdfd03d93f2dc6f064099795bf638
upstream_linux: released (4.8~rc1)
precise/esm_linux: ignored (was needs-triage ESM criteria)
trusty/esm_linux: ignored (was needs-triage ESM criteria)
xenial_linux: released (4.4.0-157.185)
esm-infra/xenial_linux: released (4.4.0-157.185)
bionic_linux: not-affected (4.13.0-16.19)
cosmic_linux: not-affected (4.15.0-20.21)
disco_linux: not-affected (4.18.0-10.11)
devel_linux: not-affected (5.0.0-13.14)

Patches_linux-lts-trusty:
upstream_linux-lts-trusty: released (4.8~rc1)
precise/esm_linux-lts-trusty: ignored (was needs-triage ESM criteria)
trusty/esm_linux-lts-trusty: DNE
xenial_linux-lts-trusty: DNE
bionic_linux-lts-trusty: DNE
cosmic_linux-lts-trusty: DNE
disco_linux-lts-trusty: DNE
devel_linux-lts-trusty: DNE

Patches_linux-goldfish:
upstream_linux-goldfish: released (4.8~rc1)
precise/esm_linux-goldfish: DNE
trusty/esm_linux-goldfish: DNE
xenial_linux-goldfish: ignored (end-of-life)
bionic_linux-goldfish: DNE
cosmic_linux-goldfish: DNE
disco_linux-goldfish: DNE
devel_linux-goldfish: DNE

Patches_linux-grouper:
upstream_linux-grouper: released (4.8~rc1)
precise/esm_linux-grouper: DNE
trusty/esm_linux-grouper: DNE
xenial_linux-grouper: DNE
bionic_linux-grouper: DNE
cosmic_linux-grouper: DNE
disco_linux-grouper: DNE
devel_linux-grouper: DNE

Patches_linux-maguro:
upstream_linux-maguro: released (4.8~rc1)
precise/esm_linux-maguro: DNE
trusty/esm_linux-maguro: DNE
xenial_linux-maguro: DNE
bionic_linux-maguro: DNE
cosmic_linux-maguro: DNE
disco_linux-maguro: DNE
devel_linux-maguro: DNE

Patches_linux-mako:
upstream_linux-mako: released (4.8~rc1)
precise/esm_linux-mako: DNE
trusty/esm_linux-mako: DNE
xenial_linux-mako: ignored (abandoned)
bionic_linux-mako: DNE
cosmic_linux-mako: DNE
disco_linux-mako: DNE
devel_linux-mako: DNE

Patches_linux-manta:
upstream_linux-manta: released (4.8~rc1)
precise/esm_linux-manta: DNE
trusty/esm_linux-manta: DNE
xenial_linux-manta: DNE
bionic_linux-manta: DNE
cosmic_linux-manta: DNE
disco_linux-manta: DNE
devel_linux-manta: DNE

Patches_linux-flo:
upstream_linux-flo: released (4.8~rc1)
precise/esm_linux-flo: DNE
trusty/esm_linux-flo: DNE
xenial_linux-flo: ignored (abandoned)
bionic_linux-flo: DNE
cosmic_linux-flo: DNE
disco_linux-flo: DNE
devel_linux-flo: DNE

Patches_linux-raspi2:
upstream_linux-raspi2: released (4.8~rc1)
precise/esm_linux-raspi2: DNE
trusty/esm_linux-raspi2: DNE
xenial_linux-raspi2: released (4.4.0-1117.126)
bionic_linux-raspi2: not-affected (4.13.0-1005.5)
cosmic_linux-raspi2: not-affected (4.15.0-1010.11)
disco_linux-raspi2: not-affected (4.18.0-1005.7)
devel_linux-raspi2: not-affected (5.0.0-1006.6)

Patches_linux-lts-utopic:
upstream_linux-lts-utopic: released (4.8~rc1)
precise/esm_linux-lts-utopic: DNE
trusty/esm_linux-lts-utopic: DNE
xenial_linux-lts-utopic: DNE
bionic_linux-lts-utopic: DNE
cosmic_linux-lts-utopic: DNE
disco_linux-lts-utopic: DNE
devel_linux-lts-utopic: DNE

Patches_linux-lts-vivid:
upstream_linux-lts-vivid: released (4.8~rc1)
precise/esm_linux-lts-vivid: DNE
trusty/esm_linux-lts-vivid: DNE
xenial_linux-lts-vivid: DNE
bionic_linux-lts-vivid: DNE
cosmic_linux-lts-vivid: DNE
disco_linux-lts-vivid: DNE
devel_linux-lts-vivid: DNE

Patches_linux-lts-wily:
upstream_linux-lts-wily: released (4.8~rc1)
precise/esm_linux-lts-wily: DNE
trusty/esm_linux-lts-wily: DNE
xenial_linux-lts-wily: DNE
bionic_linux-lts-wily: DNE
cosmic_linux-lts-wily: DNE
disco_linux-lts-wily: DNE
devel_linux-lts-wily: DNE

Patches_linux-lts-xenial:
upstream_linux-lts-xenial: released (4.8~rc1)
precise/esm_linux-lts-xenial: DNE
trusty/esm_linux-lts-xenial: released (4.4.0-157.185~14.04.1)
xenial_linux-lts-xenial: DNE
bionic_linux-lts-xenial: DNE
cosmic_linux-lts-xenial: DNE
disco_linux-lts-xenial: DNE
devel_linux-lts-xenial: DNE

Patches_linux-snapdragon:
upstream_linux-snapdragon: released (4.8~rc1)
precise/esm_linux-snapdragon: DNE
trusty/esm_linux-snapdragon: DNE
xenial_linux-snapdragon: released (4.4.0-1121.127)
bionic_linux-snapdragon: released (4.15.0-1053.57)
cosmic_linux-snapdragon: DNE
disco_linux-snapdragon: not-affected (5.0.0-1010.10)
devel_linux-snapdragon: not-affected (5.0.0-1010.10)

Patches_linux-aws:
upstream_linux-aws: released (4.8~rc1)
precise/esm_linux-aws: DNE
trusty/esm_linux-aws: released (4.4.0-1050.54)
xenial_linux-aws: released (4.4.0-1090.101)
esm-infra/xenial_linux-aws: released (4.4.0-1090.101)
bionic_linux-aws: not-affected (4.15.0-1001.1)
cosmic_linux-aws: not-affected (4.15.0-1007.7)
disco_linux-aws: not-affected (4.18.0-1002.3)
devel_linux-aws: not-affected (5.0.0-1004.4)

Patches_linux-hwe:
upstream_linux-hwe: released (4.8~rc1)
precise/esm_linux-hwe: DNE
trusty/esm_linux-hwe: DNE
xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1)
esm-infra/xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1)
bionic_linux-hwe: not-affected (4.18.0-13.14~18.04.1)
cosmic_linux-hwe: DNE
disco_linux-hwe: DNE
devel_linux-hwe: DNE

Patches_linux-hwe-edge:
upstream_linux-hwe-edge: released (4.8~rc1)
precise/esm_linux-hwe-edge: DNE
trusty/esm_linux-hwe-edge: DNE
xenial_linux-hwe-edge: not-affected (4.8.0-36.36~16.04.1)
esm-infra/xenial_linux-hwe-edge: not-affected (4.8.0-36.36~16.04.1)
bionic_linux-hwe-edge: not-affected (5.0.0-15.16~18.04.1)
cosmic_linux-hwe-edge: DNE
disco_linux-hwe-edge: DNE
devel_linux-hwe-edge: DNE

Patches_linux-gke:
upstream_linux-gke: released (4.8~rc1)
precise/esm_linux-gke: DNE
trusty/esm_linux-gke: DNE
xenial_linux-gke: ignored (end-of-life)
bionic_linux-gke: DNE
cosmic_linux-gke: DNE
disco_linux-gke: DNE
devel_linux-gke: DNE

Patches_linux-gke-4.15:
upstream_linux-gke-4.15: released (4.8~rc1)
precise/esm_linux-gke-4.15: DNE
trusty/esm_linux-gke-4.15: DNE
xenial_linux-gke-4.15: DNE
bionic_linux-gke-4.15: not-affected (4.15.0-1030.32)
disco_linux-gke-4.15: DNE
devel_linux-gke-4.15: DNE

Patches_linux-gke-5.0:
upstream_linux-gke-5.0: released (4.8~rc1)
precise/esm_linux-gke-5.0: DNE
trusty/esm_linux-gke-5.0: DNE
xenial_linux-gke-5.0: DNE
bionic_linux-gke-5.0: not-affected (5.0.0-1011.11~18.04.1)
disco_linux-gke-5.0: DNE
devel_linux-gke-5.0: DNE

Patches_linux-azure:
upstream_linux-azure: released (4.8~rc1)
precise/esm_linux-azure: DNE
trusty/esm_linux-azure: ignored (was needs-triage ESM criteria)
xenial_linux-azure: not-affected (4.11.0-1009.9)
esm-infra/xenial_linux-azure: not-affected (4.11.0-1009.9)
bionic_linux-azure: not-affected (4.15.0-1002.2)
cosmic_linux-azure: not-affected (4.15.0-1009.9)
disco_linux-azure: not-affected (4.18.0-1003.3)
devel_linux-azure: not-affected (5.0.0-1004.4)

Patches_linux-azure-edge:
upstream_linux-azure-edge: released (4.8~rc1)
precise/esm_linux-azure-edge: DNE
trusty/esm_linux-azure-edge: DNE
xenial_linux-azure-edge: not-affected (4.11.0-1009.9)
bionic_linux-azure-edge: not-affected (4.15.0-1002.2)
cosmic_linux-azure-edge: DNE
disco_linux-azure-edge: DNE
devel_linux-azure-edge: DNE

Patches_linux-gcp:
upstream_linux-gcp: released (4.8~rc1)
precise/esm_linux-gcp: DNE
trusty/esm_linux-gcp: DNE
xenial_linux-gcp: not-affected (4.10.0-1004.4)
esm-infra/xenial_linux-gcp: not-affected (4.10.0-1004.4)
bionic_linux-gcp: not-affected (4.15.0-1001.1)
cosmic_linux-gcp: not-affected (4.15.0-1006.6)
disco_linux-gcp: not-affected (4.18.0-1002.3)
devel_linux-gcp: not-affected (5.0.0-1004.4)

Patches_linux-kvm:
upstream_linux-kvm: released (4.8~rc1)
precise/esm_linux-kvm: DNE
trusty/esm_linux-kvm: DNE
xenial_linux-kvm: released (4.4.0-1052.59)
esm-infra/xenial_linux-kvm: released (4.4.0-1052.59)
bionic_linux-kvm: not-affected (4.15.0-1002.2)
cosmic_linux-kvm: not-affected (4.15.0-1008.8)
disco_linux-kvm: not-affected (4.18.0-1003.3)
devel_linux-kvm: not-affected (5.0.0-1004.4)

Patches_linux-euclid:
upstream_linux-euclid: released (4.8~rc1)
precise/esm_linux-euclid: DNE
trusty/esm_linux-euclid: DNE
xenial_linux-euclid: ignored (was needs-triage now end-of-life)
bionic_linux-euclid: DNE
cosmic_linux-euclid: DNE
disco_linux-euclid: DNE
devel_linux-euclid: DNE

Patches_linux-oem:
upstream_linux-oem: released (4.8~rc1)
precise/esm_linux-oem: DNE
trusty/esm_linux-oem: DNE
xenial_linux-oem: ignored (was needs-triage now end-of-life)
bionic_linux-oem: not-affected (4.15.0-1002.3)
cosmic_linux-oem: not-affected (4.15.0-1004.5)
disco_linux-oem: not-affected (4.15.0-1021.24)
devel_linux-oem: not-affected (4.15.0-1035.40)

Patches_linux-gcp-edge:
upstream_linux-gcp-edge: released (4.8~rc1)
precise/esm_linux-gcp-edge: DNE
trusty/esm_linux-gcp-edge: DNE
xenial_linux-gcp-edge: DNE
bionic_linux-gcp-edge: not-affected (4.18.0-1004.5~18.04.1)
cosmic_linux-gcp-edge: DNE
disco_linux-gcp-edge: DNE
devel_linux-gcp-edge: DNE

Patches_linux-aws-hwe:
upstream_linux-aws-hwe: released (4.8~rc1)
precise/esm_linux-aws-hwe: DNE
trusty/esm_linux-aws-hwe: DNE
xenial_linux-aws-hwe: not-affected (4.15.0-1030.31~16.04.1)
esm-infra/xenial_linux-aws-hwe: not-affected (4.15.0-1030.31~16.04.1)
bionic_linux-aws-hwe: DNE
cosmic_linux-aws-hwe: DNE
disco_linux-aws-hwe: DNE
devel_linux-aws-hwe: DNE

Patches_linux-oracle:
upstream_linux-oracle: released (4.8~rc1)
precise/esm_linux-oracle: DNE
trusty/esm_linux-oracle: DNE
xenial_linux-oracle: not-affected (4.15.0-1007.9~16.04.1)
esm-infra/xenial_linux-oracle: not-affected (4.15.0-1007.9~16.04.1)
bionic_linux-oracle: not-affected (4.15.0-1007.9)
cosmic_linux-oracle: not-affected (4.15.0-1007.9)
disco_linux-oracle: not-affected (4.15.0-1007.9)
devel_linux-oracle: not-affected (4.15.0-1011.13)