What’s Vulnerable › Vulnerabilities

CVE-2019-0154

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-14 · updated 2026-06-17

Description

Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may allow an authenticated user to potentially enable denial of service via local access.

Affected products

• Canonical Ubuntu Linux: 14.04
• Intel Atom X5-A3930 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Atom X5-A3940 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Atom X7-A3950 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Celeron J3355 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Celeron J3455 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Celeron J4005 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Celeron J4105 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Celeron N3350 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Celeron N3450 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Celeron N4000 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Celeron N4100 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7+8700 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6500U Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6560U Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6567U Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6600U Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6650U Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6660U Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6700 Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6700Hq Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6700K Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6700T Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6700Te Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6770Hq Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6785R Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6820Eq Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6820Hk Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6820Hq Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859
• Intel Core I7-6822Eq Firmware: before 26.20.100.6859 — fixed in 26.20.100.6859

How to fix

Upgrade to a fixed version: Intel Atom X5-A3930 Firmware 26.20.100.6859; Intel Atom X5-A3940 Firmware 26.20.100.6859; Intel Atom X7-A3950 Firmware 26.20.100.6859; Intel Celeron J3355 Firmware 26.20.100.6859; Intel Celeron J3455 Firmware 26.20.100.6859; Intel Celeron J4005 Firmware 26.20.100.6859; Intel Celeron J4105 Firmware 26.20.100.6859; Intel Celeron N3350 Firmware 26.20.100.6859; Intel Celeron N3450 Firmware 26.20.100.6859; Intel Celeron N4000 Firmware 26.20.100.6859; Intel Celeron N4100 Firmware 26.20.100.6859; Intel Core I7+8700 Firmware 26.20.100.6859. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
• https://access.redhat.com/errata/RHSA-2020:0204
• https://seclists.org/bugtraq/2019/Nov/26
• https://security.netapp.com/advisory/ntap-20200320-0004/
• https://support.f5.com/csp/article/K73659122?utm_source=f5support&amp%3Butm_medium=RSS
• https://usn.ubuntu.com/4186-2/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00260.html
• http://packetstormsecurity.com/files/155375/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
• https://access.redhat.com/errata/RHSA-2020:0204
• https://seclists.org/bugtraq/2019/Nov/26
• https://security.netapp.com/advisory/ntap-20200320-0004/
• https://support.f5.com/csp/article/K73659122?utm_source=f5support&amp%3Butm_medium=RSS

Get alerted when CVE-2019-0154 or the next vulnerability affects your stack