Early Access — Mondoo Vulnerability Intelligence is currently in preview.

UBUNTU-CVE-2019-18786

MEDIUM5.5

In the Linux kernel through 5.3.8, f->fmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem.

Published Nov 6, 2019

Modified 6 months ago

Fix available

Details

In the Linux kernel through 5.3.8, f->fmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem.

Affected Packages

Ubuntu:Pro:14.04:LTSlinux

Affected versions:

3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.83.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.15+170 more

Ubuntu:16.04:LTSlinux

Fixed in:

4.2.0-16.19

Ubuntu:18.04:LTSlinux

Affected versions:

4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.114.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.21+34 more

Fixed in:

4.15.0-88.88

Ubuntu:20.04:LTSlinux

Affected versions:

5.3.0-18.195.3.0-24.265.4.0-9.12

Fixed in:

5.4.0-18.22

Ubuntu:20.04:LTSlinux-aws

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.11

Fixed in:

5.4.0-1005.5

Ubuntu:Pro:14.04:LTSlinux-aws

Affected versions:

4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.94.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.16+94 more

Ubuntu:16.04:LTSlinux-aws

Fixed in:

4.4.0-1001.10

Ubuntu:18.04:LTSlinux-aws

Affected versions:

4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.74.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.17+28 more

Fixed in:

4.15.0-1060.62

Ubuntu:18.04:LTSlinux-aws-5.0

Affected versions:

5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.1

Fixed in:

5.0.0-1025.28

Ubuntu:18.04:LTSlinux-aws-5.3

Fixed in:

5.3.0-1016.17~18.04.1

Ubuntu:16.04:LTSlinux-aws-hwe

Affected versions:

4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.14.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.1+11 more

Fixed in:

4.15.0-1060.62~16.04.1

Ubuntu:Pro:14.04:LTSlinux-azure

Affected versions:

4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.24.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.1+10 more

Fixed in:

4.15.0-1071.76~14.04.1

Ubuntu:18.04:LTSlinux-azure

Affected versions:

4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.94.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.19+31 more

Fixed in:

5.0.0-1032.34

Ubuntu:20.04:LTSlinux-azure

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.10

Fixed in:

5.4.0-1006.6

Ubuntu:16.04:LTSlinux-azure

Affected versions:

4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.154.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.12+42 more

Fixed in:

4.15.0-1071.76

Ubuntu:14.04:LTSlinux-azure

Affected versions:

Ubuntu:18.04:LTSlinux-azure-4.15

Fixed in:

4.15.0-1082.92

Ubuntu:18.04:LTSlinux-azure-5.3

Affected versions:

5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1

Fixed in:

5.3.0-1013.14~18.04.1

Ubuntu:Pro:18.04:LTSlinux-azure-edge

Affected versions:

4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2

Ubuntu:16.04:LTSlinux-gcp

Affected versions:

4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.94.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.15+33 more

Fixed in:

4.15.0-1055.59

Ubuntu:20.04:LTSlinux-gcp

Affected versions:

5.3.0-1004.45.3.0-1009.105.3.0-1011.12

Fixed in:

5.4.0-1005.5

Ubuntu:18.04:LTSlinux-gcp

Affected versions:

4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.84.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.18+25 more

Fixed in:

5.0.0-1031.32

Ubuntu:18.04:LTSlinux-gcp-4.15

Fixed in:

4.15.0-1071.81

Ubuntu:18.04:LTSlinux-gcp-5.3

Affected versions:

5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.1

Fixed in:

5.3.0-1012.13~18.04.1

Ubuntu:Pro:18.04:LTSlinux-gcp-edge

Affected versions:

4.18.0-1004.5~18.04.14.18.0-1005.6~18.04.14.18.0-1006.7~18.04.14.18.0-1007.8~18.04.14.18.0-1008.9~18.04.14.18.0-1009.10~18.04.14.18.0-1011.12~18.04.14.18.0-1012.13~18.04.14.18.0-1013.14~18.04.14.18.0-1015.16~18.04.1+2 more

Ubuntu:18.04:LTSlinux-gke-4.15

Affected versions:

4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.46+5 more

Fixed in:

4.15.0-1052.55

Ubuntu:18.04:LTSlinux-gke-5.0

Affected versions:

5.0.0-1011.11~18.04.15.0.0-1013.13~18.04.15.0.0-1015.15~18.04.15.0.0-1017.17~18.04.15.0.0-1020.20~18.04.15.0.0-1022.22~18.04.35.0.0-1023.23~18.04.25.0.0-1025.26~18.04.15.0.0-1026.27~18.04.25.0.0-1027.28~18.04.1+1 more

Fixed in:

5.0.0-1030.31

Ubuntu:18.04:LTSlinux-gke-5.3

Affected versions:

5.3.0-1011.12~18.04.1

Fixed in:

5.3.0-1012.13~18.04.1

Ubuntu:18.04:LTSlinux-hwe

Affected versions:

4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.14.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.1+12 more

Fixed in:

5.3.0-40.32~18.04.1

Ubuntu:16.04:LTSlinux-hwe

Affected versions:

4.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.1+55 more

Fixed in:

4.15.0-88.88~16.04.1

Ubuntu:Pro:18.04:LTSlinux-hwe-edge

Affected versions:

5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.15.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2

Ubuntu:Pro:16.04:LTSlinux-hwe-edge

Affected versions:

4.10.0-14.16~16.04.14.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.3+13 more

Ubuntu:20.04:LTSlinux-kvm

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.10

Fixed in:

5.4.0-1004.4

Ubuntu:18.04:LTSlinux-kvm

Affected versions:

4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.84.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.17+26 more

Fixed in:

4.15.0-1053.53

Ubuntu:16.04:LTSlinux-kvm

Fixed in:

4.4.0-1004.9

Ubuntu:Pro:14.04:LTSlinux-lts-xenial

Affected versions:

4.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.14.4.0-121.145~14.04.1+138 more

Ubuntu:18.04:LTSlinux-oem

Affected versions:

4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.124.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.21+23 more

Fixed in:

4.15.0-1073.83

Ubuntu:20.04:LTSlinux-oem-5.6

Fixed in:

5.6.0-1007.7

Ubuntu:18.04:LTSlinux-oem-osp1

Affected versions:

5.0.0-1010.115.0.0-1012.135.0.0-1015.165.0.0-1018.205.0.0-1020.225.0.0-1022.245.0.0-1024.275.0.0-1025.285.0.0-1027.315.0.0-1028.32+3 more

Fixed in:

5.0.0-1039.44

Ubuntu:20.04:LTSlinux-oracle

Affected versions:

5.3.0-1002.25.3.0-1007.85.3.0-1008.9

Fixed in:

5.4.0-1005.5

Ubuntu:18.04:LTSlinux-oracle

Affected versions:

4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.134.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.20+9 more

Fixed in:

4.15.0-1033.36

Ubuntu:16.04:LTSlinux-oracle

Affected versions:

4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.14.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.1+9 more

Fixed in:

4.15.0-1033.36~16.04.1

Ubuntu:18.04:LTSlinux-oracle-5.0

Affected versions:

5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.1

Fixed in:

5.0.0-1011.16

Ubuntu:18.04:LTSlinux-oracle-5.3

Fixed in:

5.3.0-1011.12~18.04.1

Ubuntu:20.04:LTSlinux-raspi

Fixed in:

5.4.0-1007.7

Ubuntu:16.04:LTSlinux-raspi2

Fixed in:

4.2.0-1013.19

Ubuntu:18.04:LTSlinux-raspi2

Affected versions:

4.13.0-1005.54.13.0-1006.64.13.0-1008.84.15.0-1006.74.15.0-1009.104.15.0-1010.114.15.0-1011.124.15.0-1012.134.15.0-1013.144.15.0-1017.18+29 more

Fixed in:

4.15.0-1055.59

Ubuntu:Pro:20.04:LTSlinux-raspi2

Affected versions:

5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6

Ubuntu:18.04:LTSlinux-raspi2-5.3

Affected versions:

5.3.0-1017.19~18.04.1

Fixed in:

5.3.0-1018.20~18.04.1

Ubuntu:20.04:LTSlinux-riscv

Fixed in:

5.4.0-24.28

Ubuntu:16.04:LTSlinux-snapdragon

Affected versions:

4.4.0-1012.124.4.0-1013.14

Fixed in:

4.4.0-1013.15

Ubuntu:18.04:LTSlinux-snapdragon

Affected versions:

4.15.0-1053.574.15.0-1054.584.15.0-1055.594.15.0-1057.624.15.0-1058.644.15.0-1060.664.15.0-1062.694.15.0-1064.714.15.0-1065.724.15.0-1066.73+8 more

Fixed in:

4.15.0-1072.79

References

REPORThttps://lore.kernel.org/lkml/20191018044701.4786-1-kjlu@umn.edu/REPORThttps://patchwork.linuxtv.org/patch/59542/REPORThttps://ubuntu.com/security/CVE-2019-18786 REPORThttps://ubuntu.com/security/notices/USN-4284-1 REPORThttps://ubuntu.com/security/notices/USN-4285-1 REPORThttps://ubuntu.com/security/notices/USN-4287-1 REPORThttps://ubuntu.com/security/notices/USN-4287-2 REPORThttps://www.cve.org/CVERecord?id=CVE-2019-18786

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2019-18786 USN-4284-1 USN-4285-1 USN-4287-1 USN-4287-2

Ecosystems

Ubuntu Pro 14.04 LTS Ubuntu 16.04 LTS Ubuntu 18.04 LTS Ubuntu 20.04 LTS Ubuntu 14.04 LTS Ubuntu Pro 18.04 LTS Ubuntu Pro 16.04 LTS Ubuntu Pro 20.04 LTS

Timeline

PublishedNov 6, 2019

ModifiedJul 1, 2025

UBUNTU-CVE-2019-18786 | Mondoo Vulnerability Intelligence

UBUNTU-CVE-2019-18786

Details

Affected Packages

References

CVSS Analysis

Related

Ecosystems

Timeline