In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 2, 2018 | Jan 11, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debugUpgrade python-perfUpgrade perf | Jan 30, 2018 | Jan 11, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | May 23, 2018 | Jan 3, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2018 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-source-azure | Feb 9, 2018 | Jan 11, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-4.13.0-1022-oemUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-142-genericUpgrade linux-image-generic-lts-trusty | Feb 24, 2018 | Jan 11, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub