CVE-2018-5332

kernel: rds_message_alloc_sgs() function doesn't validate value used during DMA page allocation causes heap out-of-bounds write

Published Jan 11, 2018 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1369-1 linux security update
Debian DSA Debian DSA DSA-4187-1 linux security update
EUVD EUVD EUVD-2018-17111 In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).
Ubuntu USN Ubuntu USN USN-3617-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-3617-2 Linux (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-3617-3 Linux kernel (Raspberry Pi 2) vulnerabilities
Ubuntu USN Ubuntu USN USN-3619-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-3619-2 Linux kernel (Xenial HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-3620-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-3620-2 Linux kernel (Trusty HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-3632-1 Linux kernel (Azure) vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 5:33 AM
Reserved
Jan 11, 2018, 12:00 AM
Status
Modified
Published
Jan 11, 2018, 7:29 AM
Modified
Jun 17, 2026, 2:00 AM
Severity
Moderate
Public date
Jan 2, 2018, 12:00 AM