In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 2, 2018 | Jan 11, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debugUpgrade kernel-toolsUpgrade python-perfUpgrade perf | Jan 30, 2018 | Jan 11, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | May 23, 2018 | Jan 3, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 11, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-devel-azure | Feb 9, 2018 | Jan 11, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-awsUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-4.13.0-38-generic-lpae | Feb 24, 2018 | Jan 11, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub