PT-2018-2926 · Linux · Linux Kernel
Published
2018-12-03
·
Updated
2018-12-03
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a null pointer dereference in the Linux kernel's parsec implementation, specifically in the pdpl get raw handler. This can lead to a denial of service when the system is under memory pressure. The problem arises from the function test pdpl 2from raw, which calls pdpl get new init mac. If memory allocation fails in pdprl get new, it may set the l.rl field to NULL without checking the return code. Later, in test pdpl 2from raw, pdpl get raw is called, which dereferences l->rl. Although there is an ASSERT statement for l->rl in pdpl get raw, it can be disabled, leading to a null pointer dereference in pdpl raw size.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel