PT-2018-18424 · Linux+5 · Linux Kernel+5

Published 2018-03-13 · Updated 2024-06-15 · CVE-2018-8087

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.15.10

Description: A memory leak issue exists in the Linux kernel, allowing local users to cause a denial of service by consuming memory. This is triggered by an out-of-array error case in the hwsim new radio nl function.

Recommendations: For Linux kernel versions prior to 4.15.10, update to version 4.15.10 or later to resolve the issue.

Fix

DoS

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

ALT-PU-2018-1557

ALT-PU-2019-1433

CESA-2019_2029

CVE-2018-8087

DSA-4188-1

OPENSUSE-SU-2018_0781-1

OPENSUSE-SU-2024:10728-1

OPENSUSE-SU-2024:13704-1

RHSA-2019:2029

RHSA-2019:2043

RHSA-2019_2029

RHSA-2019_2043

SUSE-SU-2018:0785-1

SUSE-SU-2018:0786-1

SUSE-SU-2018:0986-1

USN-3676-1

USN-3676-2

USN-3677-1

USN-3677-2

USN-3678-1

USN-3678-2

USN-3678-3

USN-3678-4

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 453

• https://github.com/torvalds/linux/commit/0ddcff49b672239dda94d70d0fcf50317a9f4b51 · Patch
• https://osv.dev/vulnerability/USN-3677-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3678-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3676-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3678-4 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3678-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-8087 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3678-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-7492 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3676-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1068 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3678-4 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-8087 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10021 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2029 · Vendor Advisory