ISOMAN

CVE

CVE-2018-5332

In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c095508770aebf1b9218e77026e48345d719b17c
  2. http://www.securityfocus.com/bid/102507
  3. https://access.redhat.com/errata/RHSA-2018:0470
  4. https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=60daca9efbb3e4109ebc1f7069543e5573fc124e
  5. https://github.com/torvalds/linux/commit/c095508770aebf1b9218e77026e48345d719b17c
  6. https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
  7. https://usn.ubuntu.com/3617-1/
  8. https://usn.ubuntu.com/3617-2/
  9. https://usn.ubuntu.com/3617-3/
  10. https://usn.ubuntu.com/3619-1/
  11. https://usn.ubuntu.com/3619-2/
  12. https://usn.ubuntu.com/3620-1/
  13. https://usn.ubuntu.com/3620-2/
  14. https://usn.ubuntu.com/3632-1/
  15. https://www.debian.org/security/2018/dsa-4187
  16. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c095508770aebf1b9218e77026e48345d719b17c
  17. http://www.securityfocus.com/bid/102507
  18. https://access.redhat.com/errata/RHSA-2018:0470
  19. https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=60daca9efbb3e4109ebc1f7069543e5573fc124e
  20. https://github.com/torvalds/linux/commit/c095508770aebf1b9218e77026e48345d719b17c