PT-2019-8526 · Linux+3 · Linux Kernel+3

Published 2018-01-09 · Updated 2024-03-07 · CVE-2017-18595

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.11

Description An issue was discovered in the Linux kernel. A double free may be caused by the function allocate trace buffer in the file kernel/trace/trace.c.

Recommendations For Linux kernel versions prior to 4.14.11, update to version 4.14.11 or later to resolve the issue.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ALT-PU-2018-1016

ALT-PU-2018-1991

CVE-2017-18595

OPENSUSE-SU-2019:2307-1

OPENSUSE-SU-2019:2308-1

OPENSUSE-SU-2019_2307-1

OPENSUSE-SU-2019_2308-1

RHSA-2020:2082

RHSA-2020:2085

RHSA-2020:2104

RHSA-2020:2214

RHSA-2020:2242

RHSA-2020:2277

RHSA-2020:2285

RHSA-2020:2289

RHSA-2020:2522

RHSA-2020_2082

RHSA-2020_2085

SUSE-SU-2019:2648-1

SUSE-SU-2019:2651-1

SUSE-SU-2019:2658-1

SUSE-SU-2019:2706-1

SUSE-SU-2019:2710-1

SUSE-SU-2019:2756-1

SUSE-SU-2019:2879-1

SUSE-SU-2019:2949-1

SUSE-SU-2019:2950-1

SUSE-SU-2019:2984-1

SUSE-SU-2019:3200-1

SUSE-SU-2019:3295-1

SUSE-SU-2019_2706-1

SUSE-SU-2019_2710-1

SUSE-SU-2019_2879-1

SUSE-SU-2019_3295-1

SUSE-SU-2020:0093-1

Affected Products

Alt Linux

Linux Kernel

Red Hat

Suse

References · 949

• https://osv.dev/vulnerability/SUSE-SU-2019:2658-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-5508.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-18595 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2756-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2307-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2648-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0093-1 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4397f04575c44e1440ec2e49b6302785c95fd2f8 · Patch
• https://ubuntu.com/security/CVE-2017-18595 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2879-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2706-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-18595 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:3200-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2984-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2308-1 · Vendor Advisory