It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 28, 2019 | Aug 21, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 21, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debug-devel | Apr 2, 2019 | Aug 21, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade kernel-debuginfo | Apr 30, 2021 | Aug 21, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf | Apr 3, 2019 | Aug 21, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 6, 2018 | Aug 21, 2018 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 31, 2018 | Aug 21, 2018 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-docs-azureUpgrade kernel-obs-buildUpgrade kernel-default | Sep 17, 2018 | Aug 21, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-genericUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-137-powerpc64-smpUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-4.4.0-137-genericUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-oemUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-137-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-137-powerpc-e500mcUpgrade linux-image-4.4.0-137-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-4.4.0-1098-raspi2Upgrade linux-image-4.4.0-137-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-3.13.0-164-genericUpgrade linux-image-4.4.0-1069-awsUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1102-snapdragonUpgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-4.4.0-1031-awsUpgrade linux-image-aws-hweUpgrade linux-image-generic-lts-trustyUpgrade linux-image-awsUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-4.4.0-137-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1035-kvmUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-azure | Oct 5, 2018 | Aug 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub