kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Check Point Software Technologies Ltd. | Linux Kernel | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 7 | |||
| kernel-rt-0:3.10.0-957.rt56.910.el7 | cpe:/a:redhat:rhel_extras_rt:7 | RHSA-2018:3096 | 2018-10-30T00:00:00Z |
| kernel-alt-0:4.14.0-115.el7a | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:2948 | 2018-10-30T00:00:00Z |
| kernel-0:3.10.0-957.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2018:3083 | 2018-10-30T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-1369-1 | linux security update |
Debian DSA |
DSA-4187-1 | linux security update |
Debian DSA |
DSA-4188-1 | linux security update |
EUVD |
EUVD-2018-20390 | The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space. |
Ubuntu USN |
USN-3654-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3654-2 | Linux kernel (Xenial HWE) vulnerabilities |
Ubuntu USN |
USN-3656-1 | Linux kernel (Raspberry Pi 2, Snapdragon) vulnerabilities |
Ubuntu USN |
USN-3674-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3674-2 | Linux kernel (Trusty HWE) vulnerabilities |
Ubuntu USN |
USN-3677-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3677-2 | Linux kernel (HWE) vulnerabilities |
No CVSS v4.0
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.491% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.