ISOMAN

CVE

CVE-2018-17972

An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.

Severity
MEDIUM
CVSS
5.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html
  2. http://www.securityfocus.com/bid/105525
  3. https://access.redhat.com/errata/RHSA-2019:0512
  4. https://access.redhat.com/errata/RHSA-2019:0514
  5. https://access.redhat.com/errata/RHSA-2019:0831
  6. https://access.redhat.com/errata/RHSA-2019:2473
  7. https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html
  8. https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html
  9. https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
  10. https://marc.info/?l=linux-fsdevel&m=153806242024956&w=2
  11. https://support.f5.com/csp/article/K27673650?utm_source=f5support&amp%3Butm_medium=RSS
  12. https://usn.ubuntu.com/3821-1/
  13. https://usn.ubuntu.com/3821-2/
  14. https://usn.ubuntu.com/3832-1/
  15. https://usn.ubuntu.com/3835-1/
  16. https://usn.ubuntu.com/3871-1/
  17. https://usn.ubuntu.com/3871-3/
  18. https://usn.ubuntu.com/3871-4/
  19. https://usn.ubuntu.com/3871-5/
  20. https://usn.ubuntu.com/3880-1/