PT-2018-2218 · Linux+5 · Linux Kernel+5

Published 2017-08-25 · Updated 2023-02-24 · CVE-2018-10675

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.12.9

Description The issue is related to the do get mempolicy() function in the Linux kernel, which is vulnerable to a use-after-free condition. This can be exploited by local users through specially crafted system calls, potentially leading to a denial of service or other unspecified impacts.

Recommendations For Linux kernel versions prior to 4.12.9, update to version 4.12.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the do get mempolicy() function until a patch is available.

Exploit

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2017-2111

ALT-PU-2017-2114

BDU:2019-00255

CESA-2018_2164

CESA-2018_2384

CVE-2018-10675

RHSA-2018:2164

RHSA-2018:2384

RHSA-2018:2395

RHSA-2018:2785

RHSA-2018:2791

RHSA-2018:2924

RHSA-2018:2925

RHSA-2018:2933

RHSA-2018:3540

RHSA-2018:3586

RHSA-2018:3590

RHSA-2018_2164

RHSA-2018_2384

RHSA-2018_2395

SUSE-SU-2018:1368-1

SUSE-SU-2018:1374-1

SUSE-SU-2018:1375-1

SUSE-SU-2018:1376-1

SUSE-SU-2018:1846-1

USN-3754-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 230

• 🔥 https://github.com/mmxsrup/CVE-2018-3639 · Exploit
• https://github.com/torvalds/linux/commit/73223e4e2e3867ebf033a5a8eb2e5df0158ccc99 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13094 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16538 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16536 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3754-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:3590 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10877 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16537 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16535 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:2164 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:2924 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16912 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:2925 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-11472 · Vendor Advisory