Vulnerability-Lookup

RHSA-2019:2029

Vulnerability from csaf_redhat - Published: 2019-08-06 12:47 - Updated: 2026-06-30 11:35

Summary

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * Kernel: vhost_net: infinite loop while receiving packets leads to DoS (CVE-2019-3900) * Kernel: page cache side channel attacks (CVE-2019-5489) * kernel: Buffer overflow in hidp_process_report (CVE-2018-9363) * kernel: l2tp: Race condition between pppol2tp_session_create() and l2tp_eth_create() (CVE-2018-9517) * kernel: kvm: guest userspace to guest kernel write (CVE-2018-10853) * kernel: use-after-free Read in vhost_transport_send_pkt (CVE-2018-14625) * kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c (CVE-2018-14734) * kernel: Mishandling of indirect calls weakens Spectre mitigation for paravirtual guests (CVE-2018-15594) * kernel: TLB flush happens too late on mremap (CVE-2018-18281) * kernel: Heap address information leak while using L2CAP_GET_CONF_OPT (CVE-2019-3459) * kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP (CVE-2019-3460) * kernel: denial of service vector through vfio DMA mappings (CVE-2019-3882) * kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping (CVE-2019-11599) * kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS (CVE-2019-11810) * kernel: fs/ext4/extents.c leads to information disclosure (CVE-2019-11833) * kernel: Information exposure in fd_locked_ioctl function in drivers/block/floppy.c (CVE-2018-7755) * kernel: Memory leak in drivers/net/wireless/mac80211_hwsim.c:hwsim_new_radio_nl() can lead to potential denial of service (CVE-2018-8087) * kernel: HID: debug: Buffer overflow in hid_debug_events_read() in drivers/hid/hid-debug.c (CVE-2018-9516) * kernel: Integer overflow in the alarm_timer_nsleep function (CVE-2018-13053) * kernel: NULL pointer dereference in lookup_slow function (CVE-2018-13093) * kernel: NULL pointer dereference in xfs_da_shrink_inode function (CVE-2018-13094) * kernel: NULL pointer dereference in fs/xfs/libxfs/xfs_inode_buf.c (CVE-2018-13095) * kernel: Information leak in cdrom_ioctl_drive_status (CVE-2018-16658) * kernel: out-of-bound read in memcpy_fromiovecend() (CVE-2018-16885) * Kernel: KVM: leak of uninitialized stack contents to guest (CVE-2019-7222) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2018-7755

An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.

5.9 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 174 products

Product	Version	Remediation
Unresolved product id: 7Client-7.7:bpftool-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-0:3.10.0-1062.el7.src	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-debug-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-debuginfo-common-x86_64-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-doc-0:3.10.0-1062.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-tools-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:perf-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:python-perf-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.7:kernel-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.7:kernel-debuginfo-common-x86_64-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.7:perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:bpftool-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-0:3.10.0-1062.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-debug-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-debuginfo-common-x86_64-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-doc-0:3.10.0-1062.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-tools-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:perf-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:python-perf-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.7:kernel-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.7:kernel-debuginfo-common-x86_64-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.7:perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:bpftool-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:bpftool-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:bpftool-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:bpftool-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-0:3.10.0-1062.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-bootwrapper-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-bootwrapper-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debug-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debug-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debug-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debug-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debug-devel-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debug-devel-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debuginfo-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debuginfo-common-ppc64-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debuginfo-common-ppc64le-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debuginfo-common-s390x-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-debuginfo-common-x86_64-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-devel-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-devel-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-devel-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-doc-0:3.10.0-1062.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-kdump-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-kdump-debuginfo-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-kdump-devel-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-tools-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-tools-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-tools-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-tools-libs-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-tools-libs-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:perf-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:perf-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:perf-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:perf-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:perf-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:perf-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:perf-debuginfo-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:python-perf-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:python-perf-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:python-perf-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:python-perf-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-debug-devel-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-debuginfo-common-ppc64-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-debuginfo-common-ppc64le-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-debuginfo-common-x86_64-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-tools-libs-devel-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-tools-libs-devel-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:perf-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:perf-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:bpftool-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-0:3.10.0-1062.el7.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-abi-whitelists-0:3.10.0-1062.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-debug-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-debug-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-debuginfo-common-x86_64-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-doc-0:3.10.0-1062.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-tools-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:kernel-tools-libs-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:perf-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:python-perf-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.7:bpftool-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.7:kernel-debug-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.7:kernel-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.7:kernel-debuginfo-common-x86_64-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.7:kernel-tools-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.7:kernel-tools-libs-devel-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.7:perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.7:python-perf-debuginfo-0:3.10.0-1062.el7.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2018-8087

The Linux kernel is vulnerable to a memory leak in the drivers/net/wireless/mac80211_hwsim.c:hwsim_new_radio_nl() function. An attacker could exploit this to cause a potential denial of service.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Low

CVE-2018-9363

A buffer overflow due to a singed-unsigned comparsion was found in hidp_process_report() in the net/bluetooth/hidp/core.c in the Linux kernel. The buffer length is an unsigned int but gets cast to a signed int which in certain conditions can lead to a system panic and a denial-of-service.

6.1 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2018-9516

A flaw was found in the Linux kernel in the hid_debug_events_read() function in the drivers/hid/hid-debug.c file. A lack of the certain checks may allow a privileged user ("root") to achieve an out-of-bounds write and thus receiving user space buffer corruption.

3.1 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Low

CVE-2018-9517

A race condition between pppol2tp_session_create() and l2tp_eth_create() in net/l2tp/l2tp_netlink.c was found in the Linux kernel. Calling l2tp_tunnel_find() may result in a new tunnel being created with tunnel id of a previously removed tunnel which wouldn't be protected by the reference counter.

4.7 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2018-10853

A flaw was found in the way Linux kernel KVM hypervisor emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest.

7.0 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-250 - Execution with Unnecessary Privileges

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2018-13053

A flaw was found in the alarm_timer_nsleep() function in kernel/time/alarmtimer.c in the Linux kernel. The ktime_add_safe() function is not used and an integer overflow can happen causing an alarm not to fire or possibly a denial-of-service if using a large relative timeout.

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Low

CVE-2018-13093

An issue was discovered in the XFS filesystem in fs/xfs/xfs_icache.c in the Linux kernel. There is a NULL pointer dereference leading to a system panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during an allocation.

5.0 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Low

CVE-2018-13094

An issue was discovered in the XFS filesystem in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel. A NULL pointer dereference may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp. This can lead to a system crash and a denial of service.

5.0 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Low

CVE-2018-13095

An issue was discovered in the XFS filesystem in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel. A denial of service due to the NULL pointer dereference can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.

5.0 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Low

CVE-2018-14625

A flaw was found where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly impersonate AF_VSOCK messages destined to other clients or leak kernel memory.

5.3 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2018-14734

A flaw was found in the Linux Kernel in the ucma_leave_multicast() function in drivers/infiniband/core/ucma.c which allows access to a certain data structure after freeing it in ucma_process_join(). This allows an attacker to cause a use-after-free bug and to induce kernel memory corruption, leading to a system crash or other unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.

5.3 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE-416 - Use After Free

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2018-15594

It was found that paravirt_patch_call/jump() functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtualized guests.

5.6 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2018-16658

An information leak was discovered in the Linux kernel in cdrom_ioctl_drive_status() function in drivers/cdrom/cdrom.c that could be used by local attackers to read kernel memory at certain location.

4.0 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Low

CVE-2018-16885

A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length. This can cause a read beyond the buffer boundaries flaw and, in certain cases, cause a memory access fault and a system halt by accessing invalid memory address.

7.1 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Important

CVE-2018-18281

Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused.

7.8 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-672 - Operation on a Resource after Expiration or Release

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2018-19824

A flaw was found In the Linux kernel, through version 4.19.6, where a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c. An attacker could corrupt memory and possibly escalate privileges if the attacker is able to have physical access to the system.

6.6 (Medium)


                
                  CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2019-3459

A flaw was found in the Linux kernel's implementation of Logical Link Control and Adaptation Protocol (L2CAP), part of the Bluetooth stack. An attacker, within the range of standard Bluetooth transmissions, can create and send a specially crafted packet. The response to this specially crafted packet can contain part of the kernel stack which can be used in a further attack.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2019-3460

A flaw was found in the Linux kernel's implementation of logical link control and adaptation protocol (L2CAP), part of the Bluetooth stack in the l2cap_parse_conf_rsp and l2cap_parse_conf_req functions. An attacker with physical access within the range of standard Bluetooth transmission can create a specially crafted packet. The response to this specially crafted packet can contain part of the kernel stack which can be used in a further attack.

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2019-3882

A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS).

4.7 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2019-3900

An infinite loop issue was found in the vhost_net kernel module while handling incoming packets in handle_rx(). The infinite loop could occur if one end sends packets faster than the other end can process them. A guest user, maybe a remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.

6.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Important

CVE-2019-5489

A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be used to reduce effectiveness of cryptographic strength by monitoring algorithmic behavior, infer access patterns of memory to determine code paths taken, and exfiltrate data to a blinded attacker through page-granularity access times as a side-channel.

7.1 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Important

CVE-2019-7222

An information leakage issue was found in the way Linux kernel's KVM hypervisor handled page fault exceptions while emulating instructions like VMXON, VMCLEAR, VMPTRLD, and VMWRITE with memory address as an operand. It occurs if the operand is a mmio address, as the returned exception object holds uninitialized stack memory contents. A guest user/process could use this flaw to leak host's stack memory contents to a guest.

2.8 (Low)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Low

CVE-2019-9456

A flaw was found in the USB monitor driver of the Linux kernel. This flaw allows an attacker with physical access to the system to crash the system or potentially escalate their privileges.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Low

CVE-2019-10140

A vulnerability was found in Linux kernel's implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. This can allow attackers with ability to create directories on overlayfs to crash the kernel creating a denial of service (DOS).

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2019-11599

A flaw was found in the Linux kernel where the coredump implementation does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs. This allows local users to obtain sensitive information, cause a denial of service (DoS), or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls.

6.1 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

CWE-820 - Missing Synchronization

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2019-11810

A flaw was found in the Linux kernel, prior to version 5.0.7, in drivers/scsi/megaraid/megaraid_sas_base.c, where a NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds(). An attacker can crash the system if they were able to load the megaraid_sas kernel module and groom memory beforehand, leading to a denial of service (DoS), related to a use-after-free.

6.2 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2019-11833

A flaw was found in the Linux kernel's implementation of ext4 extent management. The kernel doesn't correctly initialize memory regions in the extent tree block which may be exported to a local user to obtain sensitive information by reading empty/uninitialized data from the filesystem.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-908 - Use of Uninitialized Resource

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

CVE-2019-15927

An out-of-bounds flaw was found in the ALSA usb-audio subsystem in the Linux kernel. An array boundary check was needed to restrict the array size; failing this can cause an out-of-bound access problem. Data confidentiality and integrity, as well as system availability, are all threats with this vulnerability.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 174 products, the same list as for CVE-2018-7755

Threats

Impact Moderate

References

164 references

URL	Category
https://access.redhat.com/errata/RHSA-2019:2029	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1335986	external
https://bugzilla.redhat.com/show_bug.cgi?id=1436351	external
https://bugzilla.redhat.com/show_bug.cgi?id=1537033	external
https://bugzilla.redhat.com/show_bug.cgi?id=1553216	external
https://bugzilla.redhat.com/show_bug.cgi?id=1555145	external
https://bugzilla.redhat.com/show_bug.cgi?id=1577640	external
https://bugzilla.redhat.com/show_bug.cgi?id=1589890	external
https://bugzilla.redhat.com/show_bug.cgi?id=1590228	external
https://bugzilla.redhat.com/show_bug.cgi?id=1593417	external
https://bugzilla.redhat.com/show_bug.cgi?id=1597747	external
https://bugzilla.redhat.com/show_bug.cgi?id=1597766	external
https://bugzilla.redhat.com/show_bug.cgi?id=1597771	external
https://bugzilla.redhat.com/show_bug.cgi?id=1597775	external
https://bugzilla.redhat.com/show_bug.cgi?id=1608955	external
https://bugzilla.redhat.com/show_bug.cgi?id=1609699	external
https://bugzilla.redhat.com/show_bug.cgi?id=1611005	external
https://bugzilla.redhat.com/show_bug.cgi?id=1613056	external
https://bugzilla.redhat.com/show_bug.cgi?id=1616109	external
https://bugzilla.redhat.com/show_bug.cgi?id=1616425	external
https://bugzilla.redhat.com/show_bug.cgi?id=1619846	external
https://bugzilla.redhat.com/show_bug.cgi?id=1620555	external
https://bugzilla.redhat.com/show_bug.cgi?id=1622167	external
https://bugzilla.redhat.com/show_bug.cgi?id=1623067	external
https://bugzilla.redhat.com/show_bug.cgi?id=1627563	external
https://bugzilla.redhat.com/show_bug.cgi?id=1627731	external
https://bugzilla.redhat.com/show_bug.cgi?id=1628378	external
https://bugzilla.redhat.com/show_bug.cgi?id=1631036	external
https://bugzilla.redhat.com/show_bug.cgi?id=1631045	external
https://bugzilla.redhat.com/show_bug.cgi?id=1645121	external
https://bugzilla.redhat.com/show_bug.cgi?id=1659146	external
https://bugzilla.redhat.com/show_bug.cgi?id=1661503	external
https://bugzilla.redhat.com/show_bug.cgi?id=1663176	external
https://bugzilla.redhat.com/show_bug.cgi?id=1663179	external
https://bugzilla.redhat.com/show_bug.cgi?id=1664110	external
https://bugzilla.redhat.com/show_bug.cgi?id=1665990	external
https://bugzilla.redhat.com/show_bug.cgi?id=1671930	external
https://bugzilla.redhat.com/show_bug.cgi?id=1684780	external
https://bugzilla.redhat.com/show_bug.cgi?id=1689426	external
https://bugzilla.redhat.com/show_bug.cgi?id=1693457	external
https://bugzilla.redhat.com/show_bug.cgi?id=1698757	external
https://bugzilla.redhat.com/show_bug.cgi?id=1705937	external
https://bugzilla.redhat.com/show_bug.cgi?id=1709164	external
https://bugzilla.redhat.com/show_bug.cgi?id=1712072	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2018-7755	self
https://bugzilla.redhat.com/show_bug.cgi?id=1553216	external
https://www.cve.org/CVERecord?id=CVE-2018-7755	external
https://nvd.nist.gov/vuln/detail/CVE-2018-7755	external
https://access.redhat.com/security/cve/CVE-2018-8087	self
https://bugzilla.redhat.com/show_bug.cgi?id=1555145	external
https://www.cve.org/CVERecord?id=CVE-2018-8087	external
https://nvd.nist.gov/vuln/detail/CVE-2018-8087	external
https://access.redhat.com/security/cve/CVE-2018-9363	self
https://bugzilla.redhat.com/show_bug.cgi?id=1623067	external
https://www.cve.org/CVERecord?id=CVE-2018-9363	external
https://nvd.nist.gov/vuln/detail/CVE-2018-9363	external
https://access.redhat.com/security/cve/CVE-2018-9516	self
https://bugzilla.redhat.com/show_bug.cgi?id=1631036	external
https://www.cve.org/CVERecord?id=CVE-2018-9516	external
https://nvd.nist.gov/vuln/detail/CVE-2018-9516	external
https://access.redhat.com/security/cve/CVE-2018-9517	self
https://bugzilla.redhat.com/show_bug.cgi?id=1631045	external
https://www.cve.org/CVERecord?id=CVE-2018-9517	external
https://nvd.nist.gov/vuln/detail/CVE-2018-9517	external
https://access.redhat.com/security/cve/CVE-2018-10853	self
https://bugzilla.redhat.com/show_bug.cgi?id=1589890	external
https://www.cve.org/CVERecord?id=CVE-2018-10853	external
https://nvd.nist.gov/vuln/detail/CVE-2018-10853	external
https://access.redhat.com/security/cve/CVE-2018-13053	self
https://bugzilla.redhat.com/show_bug.cgi?id=1597747	external
https://www.cve.org/CVERecord?id=CVE-2018-13053	external
https://nvd.nist.gov/vuln/detail/CVE-2018-13053	external
https://access.redhat.com/security/cve/CVE-2018-13093	self
https://bugzilla.redhat.com/show_bug.cgi?id=1597766	external
https://www.cve.org/CVERecord?id=CVE-2018-13093	external
https://nvd.nist.gov/vuln/detail/CVE-2018-13093	external
https://access.redhat.com/security/cve/CVE-2018-13094	self
https://bugzilla.redhat.com/show_bug.cgi?id=1597771	external
https://www.cve.org/CVERecord?id=CVE-2018-13094	external
https://nvd.nist.gov/vuln/detail/CVE-2018-13094	external
https://access.redhat.com/security/cve/CVE-2018-13095	self
https://bugzilla.redhat.com/show_bug.cgi?id=1597775	external
https://www.cve.org/CVERecord?id=CVE-2018-13095	external
https://nvd.nist.gov/vuln/detail/CVE-2018-13095	external
https://access.redhat.com/security/cve/CVE-2018-14625	self
https://bugzilla.redhat.com/show_bug.cgi?id=1619846	external
https://www.cve.org/CVERecord?id=CVE-2018-14625	external
https://nvd.nist.gov/vuln/detail/CVE-2018-14625	external
https://access.redhat.com/security/cve/CVE-2018-14734	self
https://bugzilla.redhat.com/show_bug.cgi?id=1611005	external
https://www.cve.org/CVERecord?id=CVE-2018-14734	external
https://nvd.nist.gov/vuln/detail/CVE-2018-14734	external
https://access.redhat.com/security/cve/CVE-2018-15594	self
https://bugzilla.redhat.com/show_bug.cgi?id=1620555	external
https://www.cve.org/CVERecord?id=CVE-2018-15594	external
https://nvd.nist.gov/vuln/detail/CVE-2018-15594	external
https://access.redhat.com/security/cve/CVE-2018-16658	self
https://bugzilla.redhat.com/show_bug.cgi?id=1627731	external
https://www.cve.org/CVERecord?id=CVE-2018-16658	external
https://nvd.nist.gov/vuln/detail/CVE-2018-16658	external
https://access.redhat.com/security/cve/CVE-2018-16885	self
https://bugzilla.redhat.com/show_bug.cgi?id=1661503	external
https://www.cve.org/CVERecord?id=CVE-2018-16885	external
https://nvd.nist.gov/vuln/detail/CVE-2018-16885	external
https://access.redhat.com/security/cve/CVE-2018-18281	self
https://bugzilla.redhat.com/show_bug.cgi?id=1645121	external
https://www.cve.org/CVERecord?id=CVE-2018-18281	external
https://nvd.nist.gov/vuln/detail/CVE-2018-18281	external
https://access.redhat.com/security/cve/CVE-2018-19824	self
https://bugzilla.redhat.com/show_bug.cgi?id=1655816	external
https://www.cve.org/CVERecord?id=CVE-2018-19824	external
https://nvd.nist.gov/vuln/detail/CVE-2018-19824	external
https://www.openwall.com/lists/oss-security/2018/…	external
https://access.redhat.com/security/cve/CVE-2019-3459	self
https://bugzilla.redhat.com/show_bug.cgi?id=1663176	external
https://www.cve.org/CVERecord?id=CVE-2019-3459	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3459	external
https://access.redhat.com/security/cve/CVE-2019-3460	self
https://bugzilla.redhat.com/show_bug.cgi?id=1663179	external
https://www.cve.org/CVERecord?id=CVE-2019-3460	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3460	external
https://access.redhat.com/security/cve/CVE-2019-3882	self
https://bugzilla.redhat.com/show_bug.cgi?id=1689426	external
https://www.cve.org/CVERecord?id=CVE-2019-3882	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3882	external
https://access.redhat.com/security/cve/CVE-2019-3900	self
https://bugzilla.redhat.com/show_bug.cgi?id=1698757	external
https://www.cve.org/CVERecord?id=CVE-2019-3900	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3900	external
https://access.redhat.com/security/cve/CVE-2019-5489	self
https://bugzilla.redhat.com/show_bug.cgi?id=1664110	external
https://www.cve.org/CVERecord?id=CVE-2019-5489	external
https://nvd.nist.gov/vuln/detail/CVE-2019-5489	external
https://access.redhat.com/security/cve/CVE-2019-7222	self
https://bugzilla.redhat.com/show_bug.cgi?id=1671930	external
https://www.cve.org/CVERecord?id=CVE-2019-7222	external
https://nvd.nist.gov/vuln/detail/CVE-2019-7222	external
https://access.redhat.com/security/cve/CVE-2019-9456	self
https://bugzilla.redhat.com/show_bug.cgi?id=1819156	external
https://www.cve.org/CVERecord?id=CVE-2019-9456	external
https://nvd.nist.gov/vuln/detail/CVE-2019-9456	external
https://access.redhat.com/security/cve/CVE-2019-10140	self
https://bugzilla.redhat.com/show_bug.cgi?id=1677778	external
https://www.cve.org/CVERecord?id=CVE-2019-10140	external
https://nvd.nist.gov/vuln/detail/CVE-2019-10140	external
https://access.redhat.com/security/cve/CVE-2019-11599	self
https://bugzilla.redhat.com/show_bug.cgi?id=1705937	external
https://www.cve.org/CVERecord?id=CVE-2019-11599	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11599	external
https://access.redhat.com/security/cve/CVE-2019-11810	self
https://bugzilla.redhat.com/show_bug.cgi?id=1709164	external
https://www.cve.org/CVERecord?id=CVE-2019-11810	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11810	external
https://access.redhat.com/security/cve/CVE-2019-11833	self
https://bugzilla.redhat.com/show_bug.cgi?id=1712072	external
https://www.cve.org/CVERecord?id=CVE-2019-11833	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11833	external
https://access.redhat.com/security/cve/CVE-2019-15927	self
https://bugzilla.redhat.com/show_bug.cgi?id=1759059	external
https://www.cve.org/CVERecord?id=CVE-2019-15927	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15927	external

Acknowledgments

Andy Lutomirski Mika Penttilä

Red Hat Paolo Abeni

Red Hat Inc. Alex Williamson

Red Hat Inc. Jason Wang

Google Felix Wilhelm

Virtuozzo Vasily Averin

Red Hat Engineering Andrea Arcangeli

JSON

To clipboard

Loading 1.3 MB of JSON…

CVE-2018-10853 (GCVE-0-2018-10853)

Vulnerability from cvelistv5 – Published: 2018-09-11 14:00 – Updated: 2024-08-05 07:46

Summary

A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest.

Severity

7 (High)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-250

Assigner

redhat redhat root

References

15 references

URL	Tags
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://usn.ubuntu.com/3777-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3777-2/	vendor-advisoryx_refsource_UBUNTU
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_CONFIRM
https://www.openwall.com/lists/oss-security/2018/…	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0036	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0103	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0179	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
Linux	kernel	Affected: 4.18

Date Public

2018-06-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:46:47.491Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10853"
          },
          {
            "name": "USN-3777-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3777-1/"
          },
          {
            "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a04512325384fe5ac119e74"
          },
          {
            "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
          },
          {
            "name": "USN-3777-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3777-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c9fa24ca7c9c47605672916491f79e8ccacb9e6"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2018/09/02/1"
          },
          {
            "name": "openSUSE-SU-2019:1407",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          },
          {
            "name": "RHSA-2020:0036",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0036"
          },
          {
            "name": "RHSA-2020:0103",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0103"
          },
          {
            "name": "RHSA-2020:0179",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0179"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.18"
            }
          ]
        }
      ],
      "datePublic": "2018-06-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-250",
              "description": "CWE-250",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-21T19:06:24.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10853"
        },
        {
          "name": "USN-3777-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3777-1/"
        },
        {
          "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a04512325384fe5ac119e74"
        },
        {
          "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
        },
        {
          "name": "USN-3777-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3777-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c9fa24ca7c9c47605672916491f79e8ccacb9e6"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2018/09/02/1"
        },
        {
          "name": "openSUSE-SU-2019:1407",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        },
        {
          "name": "RHSA-2020:0036",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0036"
        },
        {
          "name": "RHSA-2020:0103",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0103"
        },
        {
          "name": "RHSA-2020:0179",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0179"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2018-10853",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "kernel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "4.18"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Linux"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-250"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10853",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10853"
            },
            {
              "name": "USN-3777-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3777-1/"
            },
            {
              "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a04512325384fe5ac119e74",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a04512325384fe5ac119e74"
            },
            {
              "name": "[debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html"
            },
            {
              "name": "USN-3777-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3777-2/"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c9fa24ca7c9c47605672916491f79e8ccacb9e6",
              "refsource": "CONFIRM",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c9fa24ca7c9c47605672916491f79e8ccacb9e6"
            },
            {
              "name": "https://www.openwall.com/lists/oss-security/2018/09/02/1",
              "refsource": "MISC",
              "url": "https://www.openwall.com/lists/oss-security/2018/09/02/1"
            },
            {
              "name": "openSUSE-SU-2019:1407",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html"
            },
            {
              "name": "RHSA-2019:2043",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2043"
            },
            {
              "name": "RHSA-2019:2029",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2029"
            },
            {
              "name": "RHSA-2020:0036",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0036"
            },
            {
              "name": "RHSA-2020:0103",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0103"
            },
            {
              "name": "RHSA-2020:0179",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0179"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-10853",
    "datePublished": "2018-09-11T14:00:00.000Z",
    "dateReserved": "2018-05-09T00:00:00.000Z",
    "dateUpdated": "2024-08-05T07:46:47.491Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-13053 (GCVE-0-2018-13053)

Vulnerability from cvelistv5 – Published: 2018-07-02 12:00 – Updated: 2024-08-05 08:52

Summary

The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

13 references

URL	Tags
https://usn.ubuntu.com/3821-1/	vendor-advisoryx_refsource_UBUNTU
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://bugzilla.kernel.org/show_bug.cgi?id=200303	x_refsource_MISC
https://usn.ubuntu.com/3821-2/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/104671	vdb-entryx_refsource_BID
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:0831	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/4094-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4118-1/	vendor-advisoryx_refsource_UBUNTU

Date Public

2018-07-02 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:52:49.764Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3821-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3821-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=5f936e19cc0ef97dbe3a56e9498922ad5ba1edef"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=200303"
          },
          {
            "name": "USN-3821-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3821-2/"
          },
          {
            "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
          },
          {
            "name": "104671",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104671"
          },
          {
            "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
          },
          {
            "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
          },
          {
            "name": "RHSA-2019:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0831"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          },
          {
            "name": "USN-4094-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4094-1/"
          },
          {
            "name": "USN-4118-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-02T23:06:13.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3821-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3821-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=5f936e19cc0ef97dbe3a56e9498922ad5ba1edef"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=200303"
        },
        {
          "name": "USN-3821-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3821-2/"
        },
        {
          "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
        },
        {
          "name": "104671",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104671"
        },
        {
          "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
        },
        {
          "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
        },
        {
          "name": "RHSA-2019:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0831"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        },
        {
          "name": "USN-4094-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4094-1/"
        },
        {
          "name": "USN-4118-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4118-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-13053",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3821-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3821-1/"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=5f936e19cc0ef97dbe3a56e9498922ad5ba1edef",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=5f936e19cc0ef97dbe3a56e9498922ad5ba1edef"
            },
            {
              "name": "https://bugzilla.kernel.org/show_bug.cgi?id=200303",
              "refsource": "MISC",
              "url": "https://bugzilla.kernel.org/show_bug.cgi?id=200303"
            },
            {
              "name": "USN-3821-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3821-2/"
            },
            {
              "name": "[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html"
            },
            {
              "name": "104671",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104671"
            },
            {
              "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
            },
            {
              "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
            },
            {
              "name": "RHSA-2019:0831",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:0831"
            },
            {
              "name": "RHSA-2019:2043",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2043"
            },
            {
              "name": "RHSA-2019:2029",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2029"
            },
            {
              "name": "USN-4094-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4094-1/"
            },
            {
              "name": "USN-4118-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4118-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-13053",
    "datePublished": "2018-07-02T12:00:00.000Z",
    "dateReserved": "2018-07-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T08:52:49.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-13093 (GCVE-0-2018-13093)

Vulnerability from cvelistv5 – Published: 2018-07-03 05:00 – Updated: 2024-08-05 08:52

Summary

An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.g…	x_refsource_MISC
https://github.com/torvalds/linux/commit/afca6c5b…	x_refsource_MISC
https://bugzilla.kernel.org/show_bug.cgi?id=199367	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/4094-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4118-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST

Date Public

2018-07-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:52:50.331Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=afca6c5b2595fc44383919fba740c194b0b76aff"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/afca6c5b2595fc44383919fba740c194b0b76aff"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199367"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          },
          {
            "name": "USN-4094-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4094-1/"
          },
          {
            "name": "USN-4118-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode-\u003ei_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-02T19:06:10.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=afca6c5b2595fc44383919fba740c194b0b76aff"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/afca6c5b2595fc44383919fba740c194b0b76aff"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199367"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        },
        {
          "name": "USN-4094-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4094-1/"
        },
        {
          "name": "USN-4118-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4118-1/"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-13093",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode-\u003ei_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=afca6c5b2595fc44383919fba740c194b0b76aff",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=afca6c5b2595fc44383919fba740c194b0b76aff"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/afca6c5b2595fc44383919fba740c194b0b76aff",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/afca6c5b2595fc44383919fba740c194b0b76aff"
            },
            {
              "name": "https://bugzilla.kernel.org/show_bug.cgi?id=199367",
              "refsource": "MISC",
              "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199367"
            },
            {
              "name": "RHSA-2019:2043",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2043"
            },
            {
              "name": "RHSA-2019:2029",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2029"
            },
            {
              "name": "USN-4094-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4094-1/"
            },
            {
              "name": "USN-4118-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4118-1/"
            },
            {
              "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-13093",
    "datePublished": "2018-07-03T05:00:00.000Z",
    "dateReserved": "2018-07-03T00:00:00.000Z",
    "dateUpdated": "2024-08-05T08:52:50.331Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-13094 (GCVE-0-2018-13094)

Vulnerability from cvelistv5 – Published: 2018-07-03 05:00 – Updated: 2024-08-05 08:52

Summary

An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

13 references

URL	Tags
https://usn.ubuntu.com/3752-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3752-3/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3753-2/	vendor-advisoryx_refsource_UBUNTU
https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.g…	x_refsource_MISC
https://usn.ubuntu.com/3754-1/	vendor-advisoryx_refsource_UBUNTU
https://github.com/torvalds/linux/commit/bb3d48dc…	x_refsource_MISC
https://bugzilla.kernel.org/show_bug.cgi?id=199969	x_refsource_MISC
https://usn.ubuntu.com/3752-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3753-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:0831	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST

Date Public

2018-07-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:52:50.270Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3752-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-2/"
          },
          {
            "name": "USN-3752-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-3/"
          },
          {
            "name": "USN-3753-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3753-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a"
          },
          {
            "name": "USN-3754-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3754-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199969"
          },
          {
            "name": "USN-3752-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3752-1/"
          },
          {
            "name": "USN-3753-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3753-1/"
          },
          {
            "name": "RHSA-2019:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0831"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-02T19:06:27.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3752-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-2/"
        },
        {
          "name": "USN-3752-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-3/"
        },
        {
          "name": "USN-3753-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3753-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a"
        },
        {
          "name": "USN-3754-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3754-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199969"
        },
        {
          "name": "USN-3752-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3752-1/"
        },
        {
          "name": "USN-3753-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3753-1/"
        },
        {
          "name": "RHSA-2019:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0831"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-13094",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3752-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3752-2/"
            },
            {
              "name": "USN-3752-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3752-3/"
            },
            {
              "name": "USN-3753-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3753-2/"
            },
            {
              "name": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a"
            },
            {
              "name": "USN-3754-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3754-1/"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/bb3d48dcf86a97dc25fe9fc2c11938e19cb4399a"
            },
            {
              "name": "https://bugzilla.kernel.org/show_bug.cgi?id=199969",
              "refsource": "MISC",
              "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199969"
            },
            {
              "name": "USN-3752-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3752-1/"
            },
            {
              "name": "USN-3753-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3753-1/"
            },
            {
              "name": "RHSA-2019:0831",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:0831"
            },
            {
              "name": "RHSA-2019:2043",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2043"
            },
            {
              "name": "RHSA-2019:2029",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2029"
            },
            {
              "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-13094",
    "datePublished": "2018-07-03T05:00:00.000Z",
    "dateReserved": "2018-07-03T00:00:00.000Z",
    "dateUpdated": "2024-08-05T08:52:50.270Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-13095 (GCVE-0-2018-13095)

Vulnerability from cvelistv5 – Published: 2018-07-03 05:00 – Updated: 2024-08-05 08:52

Summary

An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://bugzilla.kernel.org/show_bug.cgi?id=199915	x_refsource_MISC
https://github.com/torvalds/linux/commit/23fcb334…	x_refsource_MISC
https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.g…	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:1350	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT

Date Public

2018-07-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:52:50.503Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199915"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/23fcb3340d033d9f081e21e6c12c2db7eaa541d3"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=23fcb3340d033d9f081e21e6c12c2db7eaa541d3"
          },
          {
            "name": "RHSA-2019:1350",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1350"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-06T16:06:24.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199915"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/23fcb3340d033d9f081e21e6c12c2db7eaa541d3"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=23fcb3340d033d9f081e21e6c12c2db7eaa541d3"
        },
        {
          "name": "RHSA-2019:1350",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1350"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-13095",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.kernel.org/show_bug.cgi?id=199915",
              "refsource": "MISC",
              "url": "https://bugzilla.kernel.org/show_bug.cgi?id=199915"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/23fcb3340d033d9f081e21e6c12c2db7eaa541d3",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/23fcb3340d033d9f081e21e6c12c2db7eaa541d3"
            },
            {
              "name": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=23fcb3340d033d9f081e21e6c12c2db7eaa541d3",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/fs/xfs/xfs-linux.git/commit/?h=for-next\u0026id=23fcb3340d033d9f081e21e6c12c2db7eaa541d3"
            },
            {
              "name": "RHSA-2019:1350",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1350"
            },
            {
              "name": "RHSA-2019:2043",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2043"
            },
            {
              "name": "RHSA-2019:2029",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2029"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-13095",
    "datePublished": "2018-07-03T05:00:00.000Z",
    "dateReserved": "2018-07-03T00:00:00.000Z",
    "dateUpdated": "2024-08-05T08:52:50.503Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14625 (GCVE-0-2018-14625)

Vulnerability from cvelistv5 – Published: 2018-09-10 13:00 – Updated: 2024-08-05 09:29

Summary

A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients.

Severity

5.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE

CWE-416

Assigner

redhat redhat root

References

13 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://usn.ubuntu.com/3872-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3878-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3871-5/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3878-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3871-4/	vendor-advisoryx_refsource_UBUNTU
https://syzkaller.appspot.com/bug?extid=bd3914514…	x_refsource_MISC
https://usn.ubuntu.com/3871-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3871-3/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4154	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
[UNKNOWN]	kernel	Affected: n/a

Date Public

2018-07-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:29:51.690Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14625"
          },
          {
            "name": "USN-3872-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3872-1/"
          },
          {
            "name": "USN-3878-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3878-1/"
          },
          {
            "name": "USN-3871-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-5/"
          },
          {
            "name": "USN-3878-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3878-2/"
          },
          {
            "name": "USN-3871-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-4/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://syzkaller.appspot.com/bug?extid=bd391451452fb0b93039"
          },
          {
            "name": "USN-3871-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-1/"
          },
          {
            "name": "USN-3871-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3871-3/"
          },
          {
            "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          },
          {
            "name": "RHSA-2019:4154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4154"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "[UNKNOWN]",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-10T15:06:24.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14625"
        },
        {
          "name": "USN-3872-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3872-1/"
        },
        {
          "name": "USN-3878-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3878-1/"
        },
        {
          "name": "USN-3871-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-5/"
        },
        {
          "name": "USN-3878-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3878-2/"
        },
        {
          "name": "USN-3871-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-4/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://syzkaller.appspot.com/bug?extid=bd391451452fb0b93039"
        },
        {
          "name": "USN-3871-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-1/"
        },
        {
          "name": "USN-3871-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3871-3/"
        },
        {
          "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        },
        {
          "name": "RHSA-2019:4154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4154"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-14625",
    "datePublished": "2018-09-10T13:00:00.000Z",
    "dateReserved": "2018-07-27T00:00:00.000Z",
    "dateUpdated": "2024-08-05T09:29:51.690Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-14734 (GCVE-0-2018-14734)

Vulnerability from cvelistv5 – Published: 2018-07-29 16:00 – Updated: 2024-08-05 09:38

Summary

drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free).

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

14 references

URL	Tags
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_MISC
https://usn.ubuntu.com/3797-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3847-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3797-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3847-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3849-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3849-2/	vendor-advisoryx_refsource_UBUNTU
https://www.debian.org/security/2018/dsa-4308	vendor-advisoryx_refsource_DEBIAN
https://github.com/torvalds/linux/commit/cb2595c1…	x_refsource_MISC
https://usn.ubuntu.com/3847-3/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:0831	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT

Date Public

2018-07-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T09:38:13.375Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb2595c1393b4a5211534e6f0a0fbad369e21ad8"
          },
          {
            "name": "USN-3797-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3797-2/"
          },
          {
            "name": "USN-3847-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3847-1/"
          },
          {
            "name": "USN-3797-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3797-1/"
          },
          {
            "name": "[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"
          },
          {
            "name": "USN-3847-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3847-2/"
          },
          {
            "name": "USN-3849-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3849-1/"
          },
          {
            "name": "USN-3849-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3849-2/"
          },
          {
            "name": "DSA-4308",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4308"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/cb2595c1393b4a5211534e6f0a0fbad369e21ad8"
          },
          {
            "name": "USN-3847-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3847-3/"
          },
          {
            "name": "RHSA-2019:0831",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0831"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-07-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-06T16:06:23.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb2595c1393b4a5211534e6f0a0fbad369e21ad8"
        },
        {
          "name": "USN-3797-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3797-2/"
        },
        {
          "name": "USN-3847-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3847-1/"
        },
        {
          "name": "USN-3797-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3797-1/"
        },
        {
          "name": "[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"
        },
        {
          "name": "USN-3847-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3847-2/"
        },
        {
          "name": "USN-3849-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3849-1/"
        },
        {
          "name": "USN-3849-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3849-2/"
        },
        {
          "name": "DSA-4308",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4308"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/cb2595c1393b4a5211534e6f0a0fbad369e21ad8"
        },
        {
          "name": "USN-3847-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3847-3/"
        },
        {
          "name": "RHSA-2019:0831",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0831"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-14734",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb2595c1393b4a5211534e6f0a0fbad369e21ad8",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb2595c1393b4a5211534e6f0a0fbad369e21ad8"
            },
            {
              "name": "USN-3797-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3797-2/"
            },
            {
              "name": "USN-3847-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3847-1/"
            },
            {
              "name": "USN-3797-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3797-1/"
            },
            {
              "name": "[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"
            },
            {
              "name": "USN-3847-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3847-2/"
            },
            {
              "name": "USN-3849-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3849-1/"
            },
            {
              "name": "USN-3849-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3849-2/"
            },
            {
              "name": "DSA-4308",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4308"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/cb2595c1393b4a5211534e6f0a0fbad369e21ad8",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/cb2595c1393b4a5211534e6f0a0fbad369e21ad8"
            },
            {
              "name": "USN-3847-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3847-3/"
            },
            {
              "name": "RHSA-2019:0831",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:0831"
            },
            {
              "name": "RHSA-2019:2043",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2043"
            },
            {
              "name": "RHSA-2019:2029",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2029"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-14734",
    "datePublished": "2018-07-29T16:00:00.000Z",
    "dateReserved": "2018-07-29T00:00:00.000Z",
    "dateUpdated": "2024-08-05T09:38:13.375Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-15594 (GCVE-0-2018-15594)

Vulnerability from cvelistv5 – Published: 2018-08-20 08:00 – Updated: 2024-08-05 10:01

Summary

arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

18 references

URL	Tags
https://usn.ubuntu.com/3776-1/	vendor-advisoryx_refsource_UBUNTU
https://twitter.com/grsecurity/status/10293244261…	x_refsource_MISC
https://usn.ubuntu.com/3776-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3777-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3775-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://github.com/torvalds/linux/commit/5800dc5c…	x_refsource_MISC
https://www.debian.org/security/2018/dsa-4308	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/3775-2/	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/105120	vdb-entryx_refsource_BID
https://cdn.kernel.org/pub/linux/kernel/v4.x/Chan…	x_refsource_MISC
http://www.securitytracker.com/id/1041601	vdb-entryx_refsource_SECTRACK
https://usn.ubuntu.com/3777-2/	vendor-advisoryx_refsource_UBUNTU
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_MISC
https://usn.ubuntu.com/3777-3/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT

Date Public

2018-08-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:01:54.290Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3776-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3776-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://twitter.com/grsecurity/status/1029324426142199808"
          },
          {
            "name": "USN-3776-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3776-2/"
          },
          {
            "name": "USN-3777-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3777-1/"
          },
          {
            "name": "USN-3775-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3775-1/"
          },
          {
            "name": "[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/5800dc5c19f34e6e03b5adab1282535cb102fafd"
          },
          {
            "name": "DSA-4308",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4308"
          },
          {
            "name": "USN-3775-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3775-2/"
          },
          {
            "name": "105120",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105120"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.1"
          },
          {
            "name": "1041601",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041601"
          },
          {
            "name": "USN-3777-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3777-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5800dc5c19f34e6e03b5adab1282535cb102fafd"
          },
          {
            "name": "USN-3777-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3777-3/"
          },
          {
            "name": "openSUSE-SU-2019:1407",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-08-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-06T16:06:22.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3776-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3776-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://twitter.com/grsecurity/status/1029324426142199808"
        },
        {
          "name": "USN-3776-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3776-2/"
        },
        {
          "name": "USN-3777-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3777-1/"
        },
        {
          "name": "USN-3775-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3775-1/"
        },
        {
          "name": "[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/5800dc5c19f34e6e03b5adab1282535cb102fafd"
        },
        {
          "name": "DSA-4308",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4308"
        },
        {
          "name": "USN-3775-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3775-2/"
        },
        {
          "name": "105120",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105120"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.1"
        },
        {
          "name": "1041601",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041601"
        },
        {
          "name": "USN-3777-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3777-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5800dc5c19f34e6e03b5adab1282535cb102fafd"
        },
        {
          "name": "USN-3777-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3777-3/"
        },
        {
          "name": "openSUSE-SU-2019:1407",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-15594",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3776-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3776-1/"
            },
            {
              "name": "https://twitter.com/grsecurity/status/1029324426142199808",
              "refsource": "MISC",
              "url": "https://twitter.com/grsecurity/status/1029324426142199808"
            },
            {
              "name": "USN-3776-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3776-2/"
            },
            {
              "name": "USN-3777-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3777-1/"
            },
            {
              "name": "USN-3775-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3775-1/"
            },
            {
              "name": "[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/5800dc5c19f34e6e03b5adab1282535cb102fafd",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/5800dc5c19f34e6e03b5adab1282535cb102fafd"
            },
            {
              "name": "DSA-4308",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4308"
            },
            {
              "name": "USN-3775-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3775-2/"
            },
            {
              "name": "105120",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105120"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.1",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.1"
            },
            {
              "name": "1041601",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041601"
            },
            {
              "name": "USN-3777-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3777-2/"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5800dc5c19f34e6e03b5adab1282535cb102fafd",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5800dc5c19f34e6e03b5adab1282535cb102fafd"
            },
            {
              "name": "USN-3777-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3777-3/"
            },
            {
              "name": "openSUSE-SU-2019:1407",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html"
            },
            {
              "name": "RHSA-2019:2043",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2043"
            },
            {
              "name": "RHSA-2019:2029",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2029"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-15594",
    "datePublished": "2018-08-20T08:00:00.000Z",
    "dateReserved": "2018-08-20T00:00:00.000Z",
    "dateUpdated": "2024-08-05T10:01:54.290Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16658 (GCVE-0-2018-16658)

Vulnerability from cvelistv5 – Published: 2018-09-07 14:00 – Updated: 2024-08-05 10:32

Summary

An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_MISC
https://usn.ubuntu.com/3797-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3797-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3820-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3820-2/	vendor-advisoryx_refsource_UBUNTU
https://cdn.kernel.org/pub/linux/kernel/v4.x/Chan…	x_refsource_MISC
https://www.debian.org/security/2018/dsa-4308	vendor-advisoryx_refsource_DEBIAN
https://github.com/torvalds/linux/commit/8f3fafc9…	x_refsource_MISC
https://usn.ubuntu.com/3822-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3822-1/	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/105334	vdb-entryx_refsource_BID
https://usn.ubuntu.com/3820-3/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4154	vendor-advisoryx_refsource_REDHAT

Date Public

2018-09-07 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:32:53.897Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4"
          },
          {
            "name": "USN-3797-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3797-2/"
          },
          {
            "name": "USN-3797-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3797-1/"
          },
          {
            "name": "[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"
          },
          {
            "name": "USN-3820-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3820-1/"
          },
          {
            "name": "USN-3820-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3820-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6"
          },
          {
            "name": "DSA-4308",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4308"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4"
          },
          {
            "name": "USN-3822-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3822-2/"
          },
          {
            "name": "USN-3822-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3822-1/"
          },
          {
            "name": "105334",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/105334"
          },
          {
            "name": "USN-3820-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3820-3/"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          },
          {
            "name": "RHSA-2019:4154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4154"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-10T15:06:26.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4"
        },
        {
          "name": "USN-3797-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3797-2/"
        },
        {
          "name": "USN-3797-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3797-1/"
        },
        {
          "name": "[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"
        },
        {
          "name": "USN-3820-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3820-1/"
        },
        {
          "name": "USN-3820-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3820-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6"
        },
        {
          "name": "DSA-4308",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4308"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4"
        },
        {
          "name": "USN-3822-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3822-2/"
        },
        {
          "name": "USN-3822-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3822-1/"
        },
        {
          "name": "105334",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/105334"
        },
        {
          "name": "USN-3820-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3820-3/"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        },
        {
          "name": "RHSA-2019:4154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4154"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-16658",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4"
            },
            {
              "name": "USN-3797-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3797-2/"
            },
            {
              "name": "USN-3797-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3797-1/"
            },
            {
              "name": "[debian-lts-announce] 20181003 [SECURITY] [DLA 1531-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html"
            },
            {
              "name": "USN-3820-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3820-1/"
            },
            {
              "name": "USN-3820-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3820-2/"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6"
            },
            {
              "name": "DSA-4308",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4308"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4"
            },
            {
              "name": "USN-3822-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3822-2/"
            },
            {
              "name": "USN-3822-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3822-1/"
            },
            {
              "name": "105334",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/105334"
            },
            {
              "name": "USN-3820-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3820-3/"
            },
            {
              "name": "RHSA-2019:2043",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2043"
            },
            {
              "name": "RHSA-2019:2029",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2029"
            },
            {
              "name": "RHSA-2019:4154",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4154"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-16658",
    "datePublished": "2018-09-07T14:00:00.000Z",
    "dateReserved": "2018-09-07T00:00:00.000Z",
    "dateUpdated": "2024-08-05T10:32:53.897Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16885 (GCVE-0-2018-16885)

Vulnerability from cvelistv5 – Published: 2019-01-03 16:00 – Updated: 2024-08-05 10:32

Summary

A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases causing a memory access fault and a system halt by accessing invalid memory address. This issue only affects kernel version 3.10.x as shipped with Red Hat Enterprise Linux 7.

Severity

4.7 (Medium)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-125

Assigner

redhat redhat root

References

4 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/106296	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
The Linux Foundation	kernel	Affected: 3.10.x as shipped with Red Hat Enterprise Linux 7

Date Public

2019-01-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:32:54.243Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16885"
          },
          {
            "name": "106296",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106296"
          },
          {
            "name": "RHSA-2019:2043",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2043"
          },
          {
            "name": "RHSA-2019:2029",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2029"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "The Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "3.10.x as shipped with Red Hat Enterprise Linux 7"
            }
          ]
        }
      ],
      "datePublic": "2019-01-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases causing a memory access fault and a system halt by accessing invalid memory address. This issue only affects kernel version 3.10.x as shipped with Red Hat Enterprise Linux 7."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-06T16:06:24.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16885"
        },
        {
          "name": "106296",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106296"
        },
        {
          "name": "RHSA-2019:2043",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2043"
        },
        {
          "name": "RHSA-2019:2029",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2029"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-16885",
    "datePublished": "2019-01-03T16:00:00.000Z",
    "dateReserved": "2018-09-11T00:00:00.000Z",
    "dateUpdated": "2024-08-05T10:32:54.243Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2019:2029

CVE-2018-10853 (GCVE-0-2018-10853)

CVE-2018-13053 (GCVE-0-2018-13053)

CVE-2018-13093 (GCVE-0-2018-13093)

CVE-2018-13094 (GCVE-0-2018-13094)

CVE-2018-13095 (GCVE-0-2018-13095)

CVE-2018-14625 (GCVE-0-2018-14625)

CVE-2018-14734 (GCVE-0-2018-14734)

CVE-2018-15594 (GCVE-0-2018-15594)

CVE-2018-16658 (GCVE-0-2018-16658)

CVE-2018-16885 (GCVE-0-2018-16885)

Tags

Sightings

Nomenclature

Related by attack behaviour