ISOMAN

CVE

CVE-2018-17182

An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7a9cdebdcc17e426fb5287e4a82db1dfe86339b2
  2. http://www.securityfocus.com/bid/105417
  3. http://www.securityfocus.com/bid/106503
  4. http://www.securitytracker.com/id/1041748
  5. https://access.redhat.com/errata/RHSA-2018:3656
  6. https://github.com/torvalds/linux/commit/7a9cdebdcc17e426fb5287e4a82db1dfe86339b2
  7. https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html
  8. https://security.netapp.com/advisory/ntap-20190204-0001/
  9. https://usn.ubuntu.com/3776-1/
  10. https://usn.ubuntu.com/3776-2/
  11. https://usn.ubuntu.com/3777-1/
  12. https://usn.ubuntu.com/3777-2/
  13. https://usn.ubuntu.com/3777-3/
  14. https://www.debian.org/security/2018/dsa-4308
  15. https://www.exploit-db.com/exploits/45497/
  16. https://www.openwall.com/lists/oss-security/2018/09/18/4
  17. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7a9cdebdcc17e426fb5287e4a82db1dfe86339b2
  18. http://www.securityfocus.com/bid/105417
  19. http://www.securityfocus.com/bid/106503
  20. http://www.securitytracker.com/id/1041748