PT-2018-3360 · Linux+5 · Linux Kernel+5

Jann Horn

·

Publicado

2018-11-30

·

Atualizado

2020-08-24

·

CVE-2018-18397

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.19.7
Description: The issue exists due to insufficient input validation in the userfaultfd component of the Linux kernel. This could allow an attacker to impact the integrity of protected information. The userfaultfd implementation mishandles access control for certain UFFDIO ioctl calls, allowing local users to write data into holes in a tmpfs file under specific conditions.
Recommendations: For Linux kernel versions prior to 4.19.7, update to version 4.19.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the userfaultfd component until a patch is available.

Exploit

Correção

RCE

Incorrect Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20CWE-863

Identificadores relacionados

ALT-PU-2018-2801
ALT-PU-2018-2813
ALT-PU-2019-1433
BDU:2020-00620
CESA-2019_0163
CVE-2018-18397
MGASA-2018-0487
MGASA-2019-0098
MGASA-2019-0171
OPENSUSE-SU-2019:0065-1
OPENSUSE-SU-2019_0065-1
RHSA-2019:0163
RHSA-2019:0202
RHSA-2019:0324
RHSA-2019:0831
RHSA-2019_0163
SUSE-SU-2019:0150-1
SUSE-SU-2019:0196-1
SUSE-SU-2019:0222-1
SUSE-SU-2019:0224-1
USN-3901-1
USN-3901-2
USN-3903-1
USN-3903-2

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu