Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Oct 30, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 30, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 8, 2022 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade perf | Apr 2, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perf | Mar 27, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo | Mar 11, 2019 | Oct 30, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 15, 2019 | Oct 18, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 24, 2019 | Oct 30, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-docs | Nov 10, 2018 | Oct 30, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-3.13.0-165-powerpc64-smpUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-azureUpgrade linux-image-3.13.0-165-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-3.13.0-165-powerpc-e500Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-3.13.0-165-powerpc-e500mcUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-3.13.0-165-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-4.18.0-1006-awsUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-aws-hweUpgrade linux-image-3.13.0-165-lowlatencyUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-3.13.0-165-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-3.13.0-165-genericUpgrade linux-image-powerpc-e500mc | Dec 7, 2018 | Oct 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub