PT-2018-1157 · Linux+5 · Linux Kernel+5
Syzbot
·
Published
2018-02-19
·
Updated
2024-06-15
·
CVE-2018-1068
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 4.x
Description
A flaw in the Linux kernel's 32-bit syscall interface for bridging allows a privileged user to arbitrarily write to a limited range of kernel memory. This issue is related to a buffer overflow in the kernel memory, which can be exploited to elevate privileges.
Recommendations
For Linux kernel version 4.x, consider applying a patch or configuration change to restrict access to the vulnerable syscall interface until a fixed version is available. As a temporary workaround, restrict the use of the 32-bit syscall interface for bridging to minimize the risk of exploitation.
Exploit
Fix
Buffer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu