CVE-2018-5333 In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL p...
MediumCVSS 5.5
EPSS 7.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.14.17-1 | 4.14.17-1 |
| debian/linux(Debian:13) | < 4.14.17-1 | 4.14.17-1 |
| debian/linux(Debian:14) | < 4.14.17-1 | 4.14.17-1 |
| Linux kernel | <= 4.14.13 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.10 | No fix listed |
References
- Debian Security Tracker CVE-2018-5333 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- USN-3583-1 vendor-advisory
- USN-3583-2 vendor-advisory
- USN-3617-1 vendor-advisory
- USN-3617-2 vendor-advisory
- USN-3617-3 vendor-advisory
- USN-3619-1 vendor-advisory
- USN-3619-2 vendor-advisory
- USN-3632-1 vendor-advisory
- www.cve.org
- git.kernel.org issue-tracking patch vendor-advisory
- packetstormsecurity.com
- 102510 third-party-advisory vdb-entry
- RHSA-2018:0470 third-party-advisory vendor-advisory
- github.com patch vendor-advisory
- [debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update mailing-list third-party-advisory
- USN-3583-1 third-party-advisory vendor-advisory
- USN-3583-2 third-party-advisory vendor-advisory
- USN-3617-1 third-party-advisory vendor-advisory
- USN-3617-2 third-party-advisory vendor-advisory
- USN-3617-3 third-party-advisory vendor-advisory
- USN-3619-1 third-party-advisory vendor-advisory
- USN-3619-2 third-party-advisory vendor-advisory
- USN-3632-1 third-party-advisory vendor-advisory
- DSA-4187 third-party-advisory vendor-advisory