Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Oct 30, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 30, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 8, 2022 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 2, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Mar 27, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libs | Mar 11, 2019 | Oct 30, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 15, 2019 | Oct 18, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 24, 2019 | Oct 30, 2018 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-devel-azure | Nov 10, 2018 | Oct 30, 2018 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500Upgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-3.13.0-165-generic-lpaeUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-165-powerpc-smpUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-3.13.0-165-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-165-lowlatencyUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-3.13.0-165-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-165-powerpc-e500Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-165-powerpc64-embUpgrade linux-image-3.13.0-165-powerpc64-smpUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-snapdragonUpgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.18.0-1007-raspi2 | Dec 7, 2018 | Oct 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub