PT-2024-10679 · Linux · Linux Kernel

Published 2024-12-04 · Updated 2024-12-18 · CVE-2018-9416

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a possible memory corruption in the sg remove scat function of scsi/sg.c. This corruption could lead to a local escalation of privilege, requiring System execution privileges. No user interaction is needed for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-9416

Affected Products

Linux Kernel

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-9416 · Security Note
• https://source.android.com/security/bulletin/pixel/2018-07-01 · Vendor Advisory
• https://t.me/cvedetector/12045 · Telegram Post