PT-2018-1587 · Linux+3 · Linux Kernel+3
Davidlohr Bueso
·
Published
2018-09-13
·
Updated
2025-09-29
·
CVE-2018-17182
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.18.9
Description
An issue in the Linux kernel allows an attacker to trigger a use-after-free via certain thread creation, map, unmap, invalidation, and dereference operations, potentially gaining privileges. The
vmacache flush all function in mm/vmacache.c mishandles sequence number overflows.Recommendations
For Linux kernel versions prior to 4.18.9, update to version 4.18.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the
vmacache flush all function until a patch is available.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Suse
Ubuntu