© 2026 vulntracker.io

CVE-2018-20669

HIGH

7.8

CVSS Score

Published: March 18, 2019 at 04:33 PM UTC

Updated: June 17, 2026 at 01:53 AM UTC

7 products affected across 3 vendorsLinux KernelUbuntu LinuxSolidfire

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.6%

Description

An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

14.04 16.04 18.04

Linux Kernel · Linux

95%

4.13 ≤ v < 4.14.1854.15 ≤ v < 4.19.1294.20 ≤ v < 5.0

Affected range stops below 4.14.185, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.129, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.0, so it looks safe — our inference, not a vendor statement

CN1610 Firmware · NetApp

95%

All versions

netapp-cn1610 (same device)

Hci Management Node · NetApp

95%

All versions

Snapprotect · NetApp

95%

All versions

Solidfire · NetApp

95%

All versions

Cn1610 · NetAppdevice

80%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (8)

x_refsource_MISCRelease NotesVendor Advisory

Source: [email protected]

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/log/drivers/gpu/drm/i915/i915_gem_execbuffer.c

Mailing Listx_refsource_MLISTThird Party Advisory

Source: [email protected]

http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html

Mailing Listx_refsource_MLISTExploitPatchThird Party Advisory

Source: [email protected]

http://www.openwall.com/lists/oss-security/2019/01/23/6

VDB Entryx_refsource_BIDBroken LinkThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/106748

x_refsource_MISCThird Party Advisory

Source: [email protected]

https://access.redhat.com/security/cve/cve-2018-20669

x_refsource_CONFIRMThird Party Advisory

Source: [email protected]

https://security.netapp.com/advisory/ntap-20190404-0002/

x_refsource_CONFIRMThird Party Advisory

Source: [email protected]

https://support.f5.com/csp/article/K32059550

Vendor Advisoryx_refsource_UBUNTUThird Party Advisory

Source: [email protected]

https://usn.ubuntu.com/4485-1/

CVSS

7.8HIGH[email protected]

Attack Vector: LOCAL
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card