PT-2018-16901 · Linux+3 · Linux Kernel+3

Mohamed Ghannam

·

Publicado

2018-01-11

·

Atualizado

2024-06-15

·

CVE-2018-5333

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.14
Description The issue arises from the mishandling of page pinning failures or invalid address supplies by the rds cmsg atomic function in net/rds/rdma.c, leading to a NULL pointer dereference in rds atomic free op.
Recommendations For Linux kernel versions prior to 4.14.14, update to version 4.14.14 or later to resolve the issue.

Exploit

Correção

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2018-1048
ALT-PU-2018-1991
CVE-2018-5333
DLA-1369-1
DSA-4187-1
OPENSUSE-SU-2018_0408-1
OPENSUSE-SU-2024:10728-1
OPENSUSE-SU-2024:13704-1
RHSA-2018:0470
SUSE-SU-2018:0383-1
SUSE-SU-2018:0416-1
SUSE-SU-2018:0482-1
SUSE-SU-2018:0555-1
SUSE-SU-2018:0660-1
SUSE-SU-2018:0834-1
SUSE-SU-2018:0841-1
SUSE-SU-2018:0848-1
SUSE-SU-2018:0986-1
USN-3583-1
USN-3583-2
USN-3617-1
USN-3617-2
USN-3617-3
USN-3619-1
USN-3619-2
USN-3632-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu