PT-2018-1157 · Linux+5 · Linux Kernel+5
Syzbot
·
Publicado
2018-02-19
·
Atualizado
2024-06-15
·
CVE-2018-1068
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 4.x
Description
A flaw in the Linux kernel's 32-bit syscall interface for bridging allows a privileged user to arbitrarily write to a limited range of kernel memory. This issue is related to a buffer overflow in the kernel memory, which can be exploited to elevate privileges.
Recommendations
For Linux kernel version 4.x, consider applying a patch or configuration change to restrict access to the vulnerable syscall interface until a fixed version is available. As a temporary workaround, restrict the use of the 32-bit syscall interface for bridging to minimize the risk of exploitation.
Exploit
Correção
Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu