PT-2018-18402 · Linux+3 · Linux Kernel+3

Publicado

2018-03-10

·

Atualizado

2024-06-15

·

CVE-2018-8043

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.15.9
Description: The issue is related to the unimac mdio probe function in the Linux kernel, which does not validate certain resource availability. This allows local users to cause a denial of service through a NULL pointer dereference.
Recommendations: For versions prior to 4.15.9, update to version 4.15.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the unimac mdio probe function to minimize the risk of exploitation.

Correção

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2018-1557
ALT-PU-2019-1433
CVE-2018-8043
OPENSUSE-SU-2018_0972-1
OPENSUSE-SU-2024:10728-1
OPENSUSE-SU-2024:13704-1
SUSE-SU-2018:1048-1
SUSE-SU-2018:1173-1
SUSE-SU-2018:1173-2
SUSE-SU-2018:1217-1
USN-3619-1
USN-3619-2
USN-3630-1
USN-3630-2
USN-3632-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu