SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBHF03602 rev. 4 - Synaptics Touchpad Driver for Windows Can Leak Freed Kernel Memory Pointers

Related Vulnerabilities: CVE-2018-15532  

The Synaptics TouchPad driver can reveal freed kernel memory pointers through the driver API. This could be used by an unauthorized third party to weaken Windows Kernel Address Space Layout Randomization. Although the revealed data is no longer in use, these pointers could be used to analyze patterns of kernel memory that have been previously used. An unauthorized third party could then potentially mount kernel-level exploits.

Potential Security Impact:
Information Disclosure
Source: HP, HP Product Security Response Team (PSRT)
Reported By: Synaptics

VULNERABILITY SUMMARY

The Synaptics TouchPad driver can reveal freed kernel memory pointers through the driver API. This could be used by an unauthorized third party to weaken Windows Kernel Address Space Layout Randomization.
Although the revealed data is no longer in use, these pointers could be used to analyze patterns of kernel memory that have been previously used. An unauthorized third party could then potentially mount kernel-level exploits.
Reference Number
CVE-2018-15532, PSR-2019-0015
SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
See RESOLUTION section for impacted products.
BACKGROUND
For a PGP signed version of this security bulletin please write to: hp-security-alert@hp.com.
Reference
Base Vector
Base Score
CVE-2018-15532
AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
3.8
RESOLUTION
HP is currently investigating our systems to determine whether they are impacted and will provide updates as soon as possible. HP recommends keeping your system up to date with the latest firmware and drivers.

Business PCs and Retail Point-of-Sale systems

Product Name
Updated Version
SoftPaq #
SoftPaq Link
HP Elite x2 1011 G1 Tablet
19.0.17.203.A.1
SP90302
HP EliteBook 1040 G2
19.0.19.68.A.5
SP91562
HP EliteBook 645 G2
19.0.19.68.A.5
SP91562
HP EliteBook 655 G2
19.0.19.68.A.5
SP91562
HP EliteBook 720 G1
19.0.19.68.A.5
SP91562
HP EliteBook 720 G2
19.0.19.68.A.5
SP91562
HP EliteBook 725 G2
19.0.19.68.A.5
SP91562
HP EliteBook 725 G3
19.0.19.68.A.5
SP91562
HP EliteBook 725 G4
19.3.8.31.A.1
SP91564
HP EliteBook 740 G1
19.0.19.68.A.5
SP91562
HP EliteBook 740 G2
19.0.19.68.A.5
SP91562
HP EliteBook 745 G2
19.0.19.68.A.5
SP91562
HP EliteBook 745 G3
19.0.19.68.A.5
SP91562
HP EliteBook 745 G4
19.3.8.31.A.1
SP91564
HP EliteBook 750 G1
19.0.19.68.A.5
SP91562
HP EliteBook 750 G2
19.0.19.68.A.5
SP91562
HP EliteBook 755 G2
19.0.19.68.A.5
SP91562
HP EliteBook 755 G3
19.0.19.68.A.5
SP91562
HP EliteBook 755 G4
19.3.8.31.A.1
SP91564
HP EliteBook 820 G2
19.0.19.68.A.5
SP91562
HP EliteBook 820/720 G3
19.0.19.68.A.5
SP91562
HP EliteBook 820/720 G4
19.3.8.31.A.1
SP91564
HP EliteBook 840 G1
19.0.19.68.A.5
SP91562
HP EliteBook 840 G2
19.0.19.68.A.5
SP91562
HP EliteBook 840 G3
19.0.19.68.A.5
SP91562
HP EliteBook 840/740 G4
19.3.8.31.A.1
SP91564
HP EliteBook 850 G1
19.0.19.68.A.5
SP91562
HP EliteBook 850 G2
19.0.19.68.A.5
SP91562
HP EliteBook 850 G3
19.0.19.68.A.5
SP91562
HP EliteBook 850/750 G4
19.3.8.31.A.1
SP91564
HP EliteBook Folio 1020 G1
19.0.17.203.A.1
SP90302
HP EliteBook Folio 1040 G1
19.0.19.68.A.5
SP91562
HP EliteBook Folio 9480m
19.0.19.68.A.5
SP91562
HP Pro x2 612 G1 Tablet
19.0.19.68.A.5
SP91562
HP ProBook 11 G1 Education Edition
19.0.19.68.A.5
SP91562
HP ProBook 11 G2
19.3.8.31.A.1
SP91564
HP ProBook 430 G1
19.0.19.68.A.5
SP91562
HP ProBook 430 G2
19.0.19.68.A.5
SP91562
HP ProBook 430 G3
19.0.19.68.A.5
SP91562
HP ProBook 430 G4
19.3.8.31.A.1
SP91564
HP ProBook 430 G5
19.4.3.165
SP91702
HP ProBook 440 G0
19.0.19.68.A.5
SP91562
HP ProBook 440 G1
19.0.19.68.A.5
SP91562
HP ProBook 440 G2
19.0.19.68.A.5
SP91562
HP ProBook 440 G3
19.0.19.68.A.5
SP91562
HP ProBook 440 G4
19.3.8.31.A.1
SP91564
HP ProBook 440 G5
19.4.3.165
SP91702
HP ProBook 445 G1
19.0.19.68.A.5
SP91562
HP ProBook 445 G2
19.0.19.68.A.5
SP91562
HP ProBook 450 G0
19.0.19.68.A.5
SP91562
HP ProBook 450 G1
19.0.19.68.A.5
SP91562
HP ProBook 450 G2
19.0.19.68.A.5
SP91562
HP ProBook 450 G3
19.0.19.68.A.5
SP91562
HP ProBook 450 G4
19.3.8.31.A.1
SP91564
HP ProBook 450 G5
19.4.3.165
SP91702
HP ProBook 455 G1
19.0.19.68.A.5
SP91562
HP ProBook 455 G2
19.0.19.68.A.5
SP91562
HP ProBook 455 G3
19.0.19.68.A.5
SP91562
HP ProBook 455 G4
19.3.8.31.A.1
SP91564
HP ProBook 455 G5
19.4.3.165
SP91702
HP ProBook 470 G0
19.0.19.68.A.5
SP91562
HP ProBook 470 G1
19.0.19.68.A.5
SP91562
HP ProBook 470 G2
19.0.19.68.A.5
SP91562
HP ProBook 470 G3
19.0.19.68.A.5
SP91562
HP ProBook 470 G4
19.3.8.31.A.1
SP91564
HP ProBook 470 G5
19.4.3.165
SP91702
HP ProBook 640 G1
19.0.19.68.A.5
SP91562
HP Probook 640 G2
19.0.19.68.A.5
SP91562
HP Probook 640 G3
19.3.8.31.A.1
SP91564
HP ProBook 645 G1
19.0.19.68.A.5
SP91562
HP Probook 645 G3
19.3.8.31.A.1
SP91564
HP ProBook 650 G1
19.0.19.68.A.5
SP91562
HP Probook 650 G2
19.0.19.68.A.5
SP91562
HP Probook 650 G3
19.3.8.31.A.1
SP91564
HP ProBook 655 G1
19.0.19.68.A.5
SP91562
HP Probook 655 G3
19.3.8.31.A.1
SP91564
HP ZBook 14 G2
19.0.19.68.A.5
SP91562
HP ZBook 14 Mobile Workstation
19.0.19.68.A.5
SP91562
HP ZBook 15 G2
19.0.19.68.A.5
SP91562
HP Zbook 15 G3
19.0.19.68.A.5
SP91562
HP Zbook 15 G4
19.3.8.31.A.1
SP91564
HP ZBook 15 Mobile Workstation
19.0.19.68.A.5
SP91562
HP Zbook 15u
19.3.8.31.A.1
SP91564
HP ZBook 15u G2
19.0.19.68.A.5
SP91562
HP ZBook 17 G2
19.0.19.68.A.5
SP91562
HP Zbook 17 G3
19.0.19.68.A.5
SP91562
HP Zbook 17 G4
19.3.8.31.A.1
SP91564
HP ZBook 17 Mobile Workstation
19.0.19.68.A.5
SP91562
HP ZHAN 66 Pro G1
19.4.3.165
SP91702

Consumer PCs

Product Name
Updated Version
SoftPaq
SoftPaq Link
HP 12-b100 ~ 12-b198
19.5.10.74
SP92532
HP 13-a100 ~ HP 13-a199
19.5.10.75
SP92533
HP 13-a200 ~ HP 13-a299
19.5.10.75
SP92533
HP 13-ab000 ~ HP 13-ab099
19.5.10.75
SP92533
HP 13-ad100 ~ HP 13-ad199
 19.5.10.77
SP93432
HP 13-af1xx
19.5.35.7
SP92011
HP 13-b000 ~ HP 13-b099
19.5.10.75
SP92533
HP 13-b100 ~ HP 13-b199
19.5.10.75
SP92533
HP 13-b200 ~ HP 13-b299
19.5.10.75
SP92533
HP 13-d100 ~ HP 13-d199
19.5.10.75
SP92936
HP 13-s100 ~ HP 13-s199
 19.5.10.75
SP92722
HP 13t-ab000 (CTO)
 19.5.10.77
SP93432
HP 13-v100 ~ HP 13-v199
 19.5.10.75
SP92936
HP 14-bf100~14-bf199
 19.5.10.75
SP92936
HP 15-ab100~HP 15-ab199
19.5.10.75
SP92533
HP 15-ab300~HP 15-ab399
19.5.10.75
SP92533
HP 15-ae000~HP 15-ae099
19.5.10.75
SP92533
HP 15-ak000~ak099
19.5.10.75
SP92533
HP 15-ap100-15ap199
19.5.10.75
SP92533
HP 15-aq0XX (ROW)
 19.5.10.75
SP92722
HP 15-aq1XX (ROW)
 19.5.10.75
SP92722
HP 15-aq2XX (ROW)
 19.5.10.75
SP92722
HP 15-ar0XX (ROW)
 19.5.10.75
SP92722
HP 15-as100 ~ HP 15-as199
19.5.10.77
SP93432
HP 15-ax000~HP 15-ax099
19.5.10.75
SP92533
HP 15-ax100~HP 15-ax199
19.5.10.75
SP92533
HP 15-ay000 ~ HP 15-ay099
 19.5.10.75
SP92936
HP 15-ay100 ~ HP 15-ay199
 19.5.10.75
SP92936
HP 15-ba000 ~ HP 15-ba099
 19.5.10.75
SP92936
HP 15-ba100 ~ HP 15-ba199
 19.5.10.75
SP92936
HP 15-bc300~HP 15-bc399
19.5.10.75
SP92533
HP 15-bc400~HP 15-bc499
19.5.10.75
SP92533
HP 15-bl100 ~ HP 15-bl199
19.5.10.75
SP92533
HP 15-bp0xx (ROW)
 19.5.10.75
SP92722
HP 15-bq1xx (ROW)
 19.5.10.75
SP92722
HP 15-bs0xx
 19.5.35.15
SP93153
HP 15-bs1xx
 19.5.35.15
SP93153
HP 15-bs2xx
 19.5.35.15
SP93153
HP 15-bw0xx
 19.5.35.15
SP93153
HP 15-cc100~HP 15-cc199
19.5.10.75
SP92533
HP 15-cc600~HP 15-cc699
19.5.10.75
SP92533
HP 15-ce100~HP 15-ce199
19.5.10.75
SP92533
HP 15-da0000 ~ HP 15-da0099
19.5.35.5
SP91771
HP 15-f2xx
19.5.10.75
SP92533
HP 15-f3xx
19.5.10.75
SP92533
HP 15g-br0xx
 19.5.35.15
SP93153
HP 15g-br1xx
 19.5.35.15
SP93153
HP 15g-bx0xx
 19.5.35.15
SP93153
HP 15g-da0000 ~ HP 15g-da0099
19.5.35.12
SP92836
HP 15q-bu0xx
 19.5.35.15
SP93153
HP 15q-bu1xx
 19.5.35.15
SP93153
HP 15q-by0xx
 19.5.35.15
SP93153
HP 15q-da0000 ~ HP 15q-da0099
19.5.35.12
SP92836
HP 15t-as000 (CTO)
 19.5.10.77
SP93432
HP 15t-as100 (CTO)
 19.5.10.77
SP93432
HP 15-w100 ~ HP 15-w199
 19.5.10.75
SP92722
HP 17-ab301~ HP 17-ab399
19.5.10.75
SP92533
HP 17-ab401~ HP 17-ab499
19.5.10.75
SP92533
HP 17-an100~HP 17-an199
19.5.10.75
SP92533
HP 17-g100~HP 17-g199
19.5.10.75
SP92533
HP 17-g200~HP 17-g299
19.5.10.75
SP92533
HP 17t-u0000 (CTO)
 19.5.10.77
SP93432
HP 17t-u100 (CTO)
 19.5.10.77
SP93432
HP 17t-u200 (CTO)
19.5.10.77
SP93432
HP 17-u000 ~ HP 17-u099
 19.5.10.77
SP93432
HP 17-u100 ~ HP 17-u199
 19.5.10.77
SP93432
HP 17-u200 ~ HP 17-u299
 19.5.10.77
SP93432
HP 17-w001~HP 17-w099
19.5.10.75
SP92533
HP ENVY 17m-ae001 ~ 17m-ae099
 19.5.10.77
SP93432
HP ENVY HP 13-ab001 ~ HP 13-ab099
 19.5.10.77
SP93432
HP ENVY HP 13-ad001 ~ HP 13-ad099
 19.5.10.77
SP93432
HP ENVY HP 13-ah0001 ~ HP 13-ah0999
19.5.10.75
SP91440
HP ENVY HP 13-d000 ~ HP 13-d099
 19.5.10.75
SP92936
HP ENVY HP 13-d100 ~ HP 13-d199
 19.5.10.75
SP92936
HP ENVY HP 15-as000 ~ HP 15-as099
 19.5.10.77
SP93432
HP ENVY HP 15-as100 ~ HP 15-as199
 19.5.10.77
SP93432
HP ENVY HP 15-u300 ~ HP 15-u399
19.5.10.75
SP92533
HP ENVY HP 17-bw0001 ~ HP 17-bw0999
 19.5.10.75
SP92861
HP ENVY HP 17-u200 ~ HP 17-u299
19.5.10.77 
SP93432
HP ENVY m6-aq0XX (BBY)
 19.5.10.75
SP92722
HP ENVY m7-u000 ~ m7-u099 (BBY)
 19.5.10.77
SP93432
HP ENVY m7-u100 ~ m7-u199 (BBY)
 19.5.10.77
SP93432
HP ENVY x360 15m-bq1xx (BBY)
 19.5.10.75
SP92722
HP ENVY x360 15m-cn0xxx
19.5.10.75
SP92861
HP ENVY x360 15m-cp0xxx
 19.5.10.75
SP92861
HP ENVY x360 HP 13-ag000 ~ HP 13-ag099
 19.5.10.75
SP92861
HP ENVY x360 HP 13-y0XX
19.5.10.75
SP92533
HP ENVY x360 HP 15-aq2XX (ROW)
 19.5.10.75
SP92722
HP ENVY x360 HP 15-bp2xx
 19.5.10.75
SP92722
HP ENVY x360 HP 15-bq1xx (ROW)
 19.5.10.75
SP92722
HP ENVY x360 HP 15-w000 ~ HP 15-w099
 19.5.10.75
SP92722
HP ENVY x360 HP 15-w100 ~ HP 15-w199
19.5.10.75
SP92722
HP ENVY x360 m6-ar0XX (BBY)
 19.5.10.75
SP92722
HP ENVY x360 m6-bp0xx (BBY)
 19.5.10.75
SP92722
HP ENVY x360 m6-w100 ~ m6-w199
19.5.10.75
SP92722
HP m6-aq1XX (BBY)
 19.5.10.75
SP92722
HP m6-w100 ~ m6-w199
 19.5.10.75
SP92722
HP m7-u100 ~ m7-u199 (BBY)
 19.5.10.77
SP93432
HP OMEN HP 15-ax000~HP 15-ax099
19.5.10.75
SP92533
HP OMEN HP 15-ce000~HP 15-ce099
19.5.10.75
SP92533
HP OMEN HP 17-an000~HP 17-an099
19.5.10.75
SP92533
HP OMEN Notebook HP 15-5200 ~ 5299
 19.5.10.75
SP92722
HP OMEN X HP 17-ap000 ~ HP 17-ap099
19.5.10.75
SP92533
HP Pavilion 11-m000~11-m099
 19.5.10.75
SP92722
HP Pavilion 11-s000 ~ 11-s099
19.5.10.75
SP92533
HP Pavilion 14-al000~14-al099
19.5.10.75
SP92533
HP Pavilion 14-ce0000 ~ 14-ce0999
19.5.35.2
SP91656
HP Pavilion HP 13-a000 ~ HP 13-a099
19.5.10.75
SP92533
HP Pavilion HP 13-a0XX
19.5.10.75
SP92533
HP Pavilion HP 13-a300 ~ HP 13-a399
19.5.10.75
SP92533
HP Pavilion HP 13-an0xxx
19.5.35.2
SP91656
HP Pavilion HP 13-b000 ~ HP 13-b099
19.5.10.75
SP92533
HP Pavilion HP 13-s000 ~ HP 13-s099
 19.5.10.75
SP92722
HP Pavilion HP 15-ab000~HP 15-ab099
19.5.10.75
SP92533
HP Pavilion HP 15-aw001 ~ HP 15-aw099
19.5.10.75
SP92533
HP Pavilion HP 15-BC000~HP 15-BC099
19.5.10.75
SP92533
HP Pavilion HP 15-cb000~HP 15-cb099
19.5.10.75
SP92533
HP Pavilion HP 15-cc000~HP 15-cc099
19.5.10.75
SP92533
HP Pavilion HP 15-ck001~HP 15-ck099
19.5.10.75
SP92533
HP Pavilion HP 15-p100~HP 15-p199
19.5.10.75
SP92533
HP Pavilion HP 15-x000~HP 15-x099
19.5.10.75
SP92533
HP Pavilion HP 17-ab001~ HP 17-ab099
19.5.10.75
SP92533
HP Pavilion HP 17-f100~HP 17-f199
19.5.10.75
SP92533
HP Pavilion HP 17-g000~HP 17-g099
19.5.10.75
SP92533
HP Pavilion x2 12-b0XX
19.5.10.75
SP92533
HP Pavilion x360 11-m000~11-m099
19.5.10.75
SP92722
HP Pavilion x360 14-ce1000 ~ 14-ce1999
19.5.35.2
SP91656
HP Pavilion x360 14m-cd0xxx
19.5.10.75
SP91721
HP Pavilion x360 HP 13-s000 ~ HP 13-s099
19.5.10.75
SP92722
HP Pavilion x360 HP 13-s100 ~ HP 13-s199
19.5.10.75
SP92722
HP Spectre Folio HP 13-ak0xxx
19.5.35.7
SP91883
HP Spectre HP 13-4100 ~ 4199
19.5.10.75
SP92533
HP Spectre HP 13-4300 ~ 4399
19.5.10.75
SP92533
HP Spectre HP 13-ae0xx
19.5.10.75
SP92533
HP Spectre HP 13-af0xx
19.5.35.7
SP92011
HP Spectre HP 13-af1xx
19.5.35.7
SP92011
HP Spectre HP 13-ap0001~HP 13-ap0999
19.5.35.12
SP92064
HP Spectre HP 13-v000 ~ HP 13-v099
 19.5.10.75
SP92936
HP Spectre HP 15-ch0xx
19.5.10.75
SP92533
HP Spectre HP 15-df0xxx
19.5.35.12
SP92064
HP Spectre x360 HP 13-w000 ~ HP 13-w099
19.5.10.75
SP92533
HP Spectre x360 HP 15-ap000-15ap099
19.5.10.75
SP92533
HP Spectre x360 HP 15-bl000 ~ HP 15-bl099
19.5.10.75
SP92533
HP Stream 11-r000 ~ 11-r099
19.5.10.75
SP92533
HP Stream 11-y1XX
19.5.35.5
SP93136
HP Stream HP 13-c100 ~ HP 13-c199
19.5.10.75
SP92533

Thin Clients

Product Name
Updated Version
SoftPaq #
SoftPaq Link
HP mt20 Mobile Thin Client
19.3.8.30
SP92285
HP mt21 Mobile Thin Client
19.4.3.165
SP92286
HP mt43 Mobile Thin Client
19.3.8.30
SP92285
Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.
Support: For issues about implementing the recommendations of this Security Bulletin, visit https://www.hp.com/go/contacthp to learn about your HP support options.
Report: To report a potential security vulnerability with any HP supported product, send email to: hp-security-alert@hp.com.
Subscribe: To initiate a subscription to receive future HP Security Bulletin alerts via email, visit https://www.hp.com/go/alerts.
Security Bulletin Archive: To view released Security Bulletins, search the HP Support Site for "security bulletin".
Software Product Category: The Software Product Category is represented in the title by the two characters following HPSB.
PI
HP Printing and Imaging
HF
HP Hardware and Firmware
GN
HP General Software
It is strongly recommended that security related information being communicated to HP be encrypted using PGP, especially exploit information.
To get the security-alert PGP key, please send an e-mail message as follows:
Subject: get key
System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.

"HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Bulletin.HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action.HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Bulletin.To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement."
REVISION HISTORY : Version: 1 - 25 January 2019 Initial release. Version: 2 - 30 August 2019 Added SoftPaq links for Business and Consumer PC models. Version: 3 – 10 October 2019 Added SoftPaq links for remaining Consumer PC models. Version: 4 – 10 February 2020 Removed space preceding links in Consumer PC to resolve link errors.