Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Oct 30, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 30, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 8, 2022 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Apr 2, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perf | Mar 27, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel | Mar 11, 2019 | Oct 30, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2019 | Oct 18, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 24, 2019 | Oct 30, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-obs-build | Nov 10, 2018 | Oct 30, 2018 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-165-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-3.13.0-165-genericUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-3.13.0-165-generic-lpaeUpgrade linux-image-3.13.0-165-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-165-powerpc-e500Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-3.13.0-165-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-azureUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-3.13.0-165-powerpc64-smpUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-generic-lts-trustyUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1032-awsUpgrade linux-image-3.13.0-165-powerpc-e500mcUpgrade linux-image-4.18.0-12-generic | Dec 7, 2018 | Oct 30, 2018 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub