PT-2018-2926 · Linux · Linux Kernel
Publicado
2018-12-03
·
Atualizado
2018-12-03
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a null pointer dereference in the Linux kernel's parsec implementation, specifically in the pdpl get raw handler. This can lead to a denial of service when the system is under memory pressure. The problem arises from the function test pdpl 2from raw, which calls pdpl get new init mac. If memory allocation fails in pdprl get new, it may set the l.rl field to NULL without checking the return code. Later, in test pdpl 2from raw, pdpl get raw is called, which dereferences l->rl. Although there is an ASSERT statement for l->rl in pdpl get raw, it can be disabled, leading to a null pointer dereference in pdpl raw size.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel