It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 28, 2019 | Aug 21, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 21, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel | Apr 2, 2019 | Aug 21, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Apr 30, 2021 | Aug 21, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 3, 2019 | Aug 21, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 6, 2018 | Aug 21, 2018 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 31, 2018 | Aug 21, 2018 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs-azure | Sep 17, 2018 | Aug 21, 2018 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1031-awsUpgrade linux-image-4.4.0-1098-raspi2Upgrade linux-image-4.4.0-1069-awsUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1035-kvmUpgrade linux-image-4.4.0-1102-snapdragonUpgrade linux-image-3.13.0-164-genericUpgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-137-generic-lpaeUpgrade linux-image-4.4.0-137-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-4.4.0-137-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-4.4.0-137-genericUpgrade linux-image-4.4.0-137-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-137-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-137-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-oemUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-164-lowlatency | Oct 5, 2018 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub