CVE-2018-17182

kernel: Use-after-free in the vmacache_flush_all function resulting in a possible privilege escalation

Published Sep 19, 2018 CVSS 3.1 · 7.8 High EPSS 3.2% KEV · Not listed
Description
An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1531-1 linux-4.9 security update
Debian DSA Debian DSA DSA-4308-1 linux security update
EUVD EUVD EUVD-2018-8956 An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.
Ubuntu USN Ubuntu USN USN-3776-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-3776-2 Linux kernel (Xenial HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-3777-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-3777-2 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-3777-3 Linux kernel (Azure) vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.01807}

epss

{'score': 0.02818}