In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 2, 2018 | Jan 11, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-toolsUpgrade perfUpgrade python-perf | Jan 30, 2018 | Jan 11, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | May 16, 2018 | Jan 2, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-obs-build | Feb 9, 2018 | Jan 11, 2018 |
| Ubuntu | — | Upgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-144-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-3.13.0-144-powerpc64-smpUpgrade linux-image-3.13.0-144-powerpc-e500Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-144-genericUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-144-powerpc64-embUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-144-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-4.13.0-1022-oemUpgrade linux-image-3.13.0-144-generic-lpaeUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-azureUpgrade linux-image-3.13.0-144-powerpc-smp | Apr 25, 2018 | Jan 11, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub