Name: CVE-2018-5873: Concurrent Execution using Shared Resource with Improper Synchronization
Creator: Rapid7
Published: 2018-07-06T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-5873, CWE-362, CWE-416, CVSS 7, EPSS 0.00152

An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05.

CVSS Details

CVSS 3.1 Base Score: 7
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade linux	Jul 30, 2024	Jul 6, 2018
Oracle_linux	—	Upgrade kernel-uek	Sep 27, 2018	Apr 19, 2017
Ubuntu	—	Upgrade linux-raspi2Upgrade linux-fipsUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-snapdragonUpgrade linux-hweUpgrade linux-lts-xenialUpgrade linuxUpgrade linux-awsUpgrade linux-hwe-edge	Nov 19, 2024	Jul 6, 2018

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence