Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Oct 30, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 30, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 8, 2022 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo | Apr 2, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Mar 27, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perf | Mar 11, 2019 | Oct 30, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2019 | Oct 18, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 24, 2019 | Oct 30, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-docs | Nov 10, 2018 | Oct 30, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-165-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.18.0-1006-awsUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-165-genericUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-3.13.0-165-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-awsUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-165-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-gkeUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-oemUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-3.13.0-165-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-165-powerpc64-embUpgrade linux-image-3.13.0-165-powerpc-e500Upgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-165-powerpc64-smpUpgrade linux-image-gcp | Dec 7, 2018 | Oct 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub