CVE-2019-0155 : What You Need to Know
Learn about CVE-2019-0155, a vulnerability in Intel processor graphics driver versions for Windows and Linux, allowing local users to escalate privileges. Find mitigation steps and affected systems here.
A potential vulnerability in Intel processor graphics driver versions for Windows and Linux could allow an authenticated local user to escalate privileges.
Understanding CVE-2019-0155
This CVE involves an access control issue in a specific subsystem for Intel processor graphics, impacting various Intel processor families and driver versions.
What is CVE-2019-0155?
The vulnerability allows an authenticated local user to potentially escalate their privileges by exploiting the access control issue in Intel processor graphics.
The Impact of CVE-2019-0155
An attacker with local access could exploit this vulnerability to elevate their privileges on affected systems.
Technical Details of CVE-2019-0155
This section provides detailed technical information about the vulnerability.
Vulnerability Description
The vulnerability arises from insufficient access control in Intel processor graphics, affecting multiple Intel processor families and driver versions.
Affected Systems and Versions
- 6th, 7th, 8th, and 9th Generation Intel Core Processor Families
- Intel Pentium Processor J, N, Silver, and Gold Series
- Intel Celeron Processor J, N, G3900, and G4900 Series
- Intel Atom Processor A and E3900 Series
- Intel Xeon Processor E3-1500 v5 and v6, E-2100, and E-2200 Processor Families
- Intel Graphics Driver for Windows versions prior to 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077
- i915 Linux Driver for Intel Processor Graphics prior to versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201
Exploitation Mechanism
An authenticated user with local access can exploit the vulnerability to potentially escalate their privileges on the affected systems.
Mitigation and Prevention
Steps to address and prevent the CVE-2019-0155 vulnerability.
Immediate Steps to Take
- Apply security patches provided by Intel for the affected driver versions.
- Monitor and restrict local user access to vulnerable systems.
Long-Term Security Practices
- Regularly update Intel graphics drivers to the latest versions.
- Implement least privilege access controls to limit user privileges.
Patching and Updates
- Ensure timely installation of security updates and patches from Intel to address the vulnerability.