PT-2017-3574 · Linux+3 · Linux Kernel+3

Hou Tao

·

Publicado

2017-02-03

·

Atualizado

2023-02-24

·

CVE-2018-7480

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11
Description: The issue is related to the blkcg init queue function in the Linux kernel, specifically in the block/blk-cgroup.c file. It is caused by a double free error, which can be exploited by local users. This exploitation may lead to a denial of service or potentially other unspecified impacts.
Recommendations: For Linux kernel versions prior to 4.11, update to version 4.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the blkcg init queue function to minimize the risk of exploitation.

Correção

DoS

Double Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

ALT-PU-2017-1854
ALT-PU-2018-1464
BDU:2018-00491
CVE-2018-7480
DSA-4188-1
OPENSUSE-SU-2018_3202-1
SUSE-SU-2018:3003-1
SUSE-SU-2018:3004-1
SUSE-SU-2018:3084-1
SUSE-SU-2018:3659-1
SUSE-SU-2019:0095-1
USN-3654-1
USN-3654-2
USN-3656-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu