Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Davidlohr Bueso

#33871de 53,779
7.8CVSS total
Vulnerabilidades · 1
PT-2018-1587
7.8
2018-09-13
Linux · Linux Kernel · CVE-2018-17182
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.18.9 **Description** An issue in the Linux kernel allows an attacker to trigger a use-after-free via certain thread creation, map, unmap, invalidation, and dereference operations, potentially gaining privileges. The `vmacache flush all` function in `mm/vmacache.c` mishandles sequence number overflows. **Recommendations** For Linux kernel versions prior to 4.18.9, update to version 4.18.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the `vmacache flush all` function until a patch is available.