CVE-2018-20669: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only
• Linux Linux Kernel: from 4.13, before 4.14.185 (fixed in 4.14.185); from 4.15, before 4.19.129 (fixed in 4.19.129); from 4.20, before 5.0 (fixed in 5.0)
• Netapp CN1610 Firmware: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Snapprotect: affected versions not specified
• Netapp Solidfire: affected versions not specified

Published 2019-03-21. Last modified 2026-06-17.