A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put().
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jan 14, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 14, 2018 |
| Oracle_linux | — | Upgrade kernel | Apr 19, 2018 | Dec 5, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 11, 2018 | Jan 14, 2018 |
| Ubuntu | — | Upgrade linux-azureUpgrade linuxUpgrade linux-raspi2 | Nov 19, 2024 | Jan 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub