An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INT_MAX, but the accounting is int based. This basically makes the accounting values, which are visible to user space via timer_getoverrun(2) and siginfo::si_overrun, random. For example, a local user can cause a denial of service (signed integer overflow) via crafted mmap, futex, timer_create, and timer_settime system calls.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 15, 2019 | Jul 2, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel | Dec 4, 2019 | Jul 2, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | Jun 22, 2018 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-docs-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Sep 17, 2018 | Jul 2, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1039-kvmUpgrade linux-image-4.4.0-1102-raspi2Upgrade linux-image-4.4.0-141-powerpc-e500mcUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-164-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-4.15.0-43-genericUpgrade linux-image-4.4.0-141-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-164-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oemUpgrade linux-image-4.15.0-43-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1031-awsUpgrade linux-image-3.13.0-164-lowlatencyUpgrade linux-image-4.4.0-1037-awsUpgrade linux-image-4.4.0-141-powerpc64-smpUpgrade linux-image-4.4.0-141-powerpc64-embUpgrade linux-image-4.15.0-1036-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1026-gcpUpgrade linux-image-4.15.0-1028-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-164-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-164-powerpc-e500Upgrade linux-image-4.15.0-1030-oemUpgrade linux-image-4.4.0-1106-snapdragonUpgrade linux-image-4.15.0-1030-raspi2Upgrade linux-image-gkeUpgrade linux-image-4.4.0-141-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-43-generic-lpaeUpgrade linux-image-3.13.0-164-generic-lpaeUpgrade linux-image-4.15.0-43-lowlatencyUpgrade linux-image-genericUpgrade linux-image-3.13.0-164-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-141-lowlatencyUpgrade linux-image-3.13.0-164-powerpc64-smpUpgrade linux-image-4.4.0-141-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1074-awsUpgrade linux-image-aws-hweUpgrade linux-image-powerpc64-smp-lts-xenial | Jan 11, 2019 | Jul 2, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub