An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically makes the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. For example, a local user can cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 2, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2019 | Jul 2, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | Jun 22, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-docs-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-default | Sep 17, 2018 | Jul 2, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-141-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-4.4.0-141-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-164-genericUpgrade linux-image-aws-hweUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-oemUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1039-kvmUpgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-141-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-4.4.0-1102-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-141-generic-lpaeUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-141-powerpc64-smpUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-141-powerpc-smpUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1030-oemUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-4.4.0-1037-awsUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-4.4.0-141-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1106-snapdragonUpgrade linux-image-lowlatency-hwe-16.04 | Jan 11, 2019 | Jul 2, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub