PT-2019-4400
CVE-2019-18786
·
Published
2019-11-05
·
Updated
2022-04-18
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.3.8
Description
The issue is related to the function
rcar drif g fmt sdr cap in the Linux kernel, specifically in the file drivers/media/platform/rcar drif.c. It is caused by the uninitialized variable f->fmt.sdr.reserved, which could lead to a memory disclosure problem. This could potentially allow an attacker to gain unauthorized access to protected information.Recommendations
For Linux kernel versions prior to 5.3.8, update to version 5.3.8 or later to resolve the issue.
At the moment, there is no information about additional mitigation measures for this specific issue.
Found an issue in the description? Have something to add? Feel free to write us 👾