An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade perf-debuginfo | Apr 27, 2020 | Sep 19, 2018 |
| Amazon_linux | — | Upgrade kernel | Oct 5, 2018 | Sep 19, 2018 |
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | Sep 19, 2018 |
| Debian | — | Upgrade linux | Oct 2, 2018 | Sep 19, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 11, 2018 | Sep 13, 2018 |
| Redhat_linux | — | Upgrade kernel | Nov 27, 2018 | Sep 19, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Oct 5, 2018 | Sep 19, 2018 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-137-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1023-kvmUpgrade linux-image-4.4.0-137-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-137-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-36-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1098-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-137-powerpc64-embUpgrade linux-image-4.15.0-1024-raspi2Upgrade linux-image-4.15.0-36-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-4.15.0-1025-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-137-generic-lpaeUpgrade linux-image-4.4.0-1069-awsUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-36-snapdragonUpgrade linux-image-4.4.0-1031-awsUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1023-awsUpgrade linux-image-4.4.0-137-genericUpgrade linux-image-4.4.0-137-powerpc-smpUpgrade linux-image-4.4.0-1102-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1021-gcpUpgrade linux-image-4.4.0-1035-kvmUpgrade linux-image-4.15.0-1021-oemUpgrade linux-image-gkeUpgrade linux-image-4.15.0-36-lowlatency | Oct 5, 2018 | Sep 19, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 19, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub