PT-2018-2804 · Linux+1 · Linux Kernel+1

Vladis Dronov · Published 2018-08-21 · Updated 2023-02-13 · CVE-2018-14656

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is caused by a missing address check in the callers of the show opcodes() function in the Linux kernel, allowing an attacker to dump kernel memory at an arbitrary kernel address into the dmesg log. This is also described as a vulnerability in the show opcodes() function due to input validation errors, which can be exploited to access protected kernel information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2018-2192

ALT-PU-2018-2210

ALT-PU-2019-1433

BDU:2019-02163

CVE-2018-14656

Affected Products

Alt Linux

Linux Kernel

References · 18

• https://bugs.chromium.org/p/project-zero/issues/detail?id=1650 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-14656 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-14656 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02163 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=342db04ae71273322f0011384a9ed414df8bdae4 · Patch
• https://ubuntu.com/security/CVE-2018-14656 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-14656 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-14656 · Vendor Advisory
• https://seclists.org/oss-sec/2018/q4/9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2018-14656 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14656 · Patch
• https://cve.org/CVERecord?id=CVE-2018-14656 · Security Note
• http://securitytracker.com/id/1041804 · Note
• https://lore.kernel.org/lkml/[e-mail]/T · Note
• https://access.redhat.com/security/cve/cve-2018-14656 · Note