Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Aug 28, 2019 | Oct 30, 2018 |
| Debian | debian-upgrade-linux | Mar 15, 2019 | Oct 30, 2018 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Jul 8, 2022 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-kernelhuawei-euleros-2_0_sp2-upgrade-kernel-debughuawei-euleros-2_0_sp2-upgrade-kernel-debug-develhuawei-euleros-2_0_sp2-upgrade-kernel-debuginfohuawei-euleros-2_0_sp2-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp2-upgrade-kernel-develhuawei-euleros-2_0_sp2-upgrade-kernel-headershuawei-euleros-2_0_sp2-upgrade-kernel-toolshuawei-euleros-2_0_sp2-upgrade-kernel-tools-libshuawei-euleros-2_0_sp2-upgrade-perfhuawei-euleros-2_0_sp2-upgrade-python-perf | Apr 2, 2019 | Oct 30, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-kernelhuawei-euleros-2_0_sp3-upgrade-kernel-debuginfohuawei-euleros-2_0_sp3-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp3-upgrade-kernel-develhuawei-euleros-2_0_sp3-upgrade-kernel-headershuawei-euleros-2_0_sp3-upgrade-kernel-toolshuawei-euleros-2_0_sp3-upgrade-kernel-tools-libshuawei-euleros-2_0_sp3-upgrade-perfhuawei-euleros-2_0_sp3-upgrade-python-perf | Mar 27, 2019 | Oct 30, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-kernelhuawei-euleros-2_0_sp5-upgrade-kernel-debuginfohuawei-euleros-2_0_sp5-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp5-upgrade-kernel-develhuawei-euleros-2_0_sp5-upgrade-kernel-headershuawei-euleros-2_0_sp5-upgrade-kernel-toolshuawei-euleros-2_0_sp5-upgrade-kernel-tools-libshuawei-euleros-2_0_sp5-upgrade-perfhuawei-euleros-2_0_sp5-upgrade-python-perf | Mar 11, 2019 | Oct 30, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Aug 15, 2019 | Oct 18, 2018 |
| Redhat_linux | — | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Apr 24, 2019 | Oct 30, 2018 |
| Suse | — | suse-upgrade-kernel-azure-basesuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-mansuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-source-azure | Nov 10, 2018 | Oct 30, 2018 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-165-genericubuntu-upgrade-linux-image-3-13-0-165-generic-lpaeubuntu-upgrade-linux-image-3-13-0-165-lowlatencyubuntu-upgrade-linux-image-3-13-0-165-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-165-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-165-powerpc-smpubuntu-upgrade-linux-image-3-13-0-165-powerpc64-embubuntu-upgrade-linux-image-3-13-0-165-powerpc64-smpubuntu-upgrade-linux-image-4-15-0-1027-gcpubuntu-upgrade-linux-image-4-15-0-1029-kvmubuntu-upgrade-linux-image-4-15-0-1031-raspi2ubuntu-upgrade-linux-image-4-15-0-1032-awsubuntu-upgrade-linux-image-4-15-0-1033-oemubuntu-upgrade-linux-image-4-15-0-1037-azureubuntu-upgrade-linux-image-4-15-0-44-genericubuntu-upgrade-linux-image-4-15-0-44-generic-lpaeubuntu-upgrade-linux-image-4-15-0-44-lowlatencyubuntu-upgrade-linux-image-4-15-0-44-snapdragonubuntu-upgrade-linux-image-4-15-0-45-genericubuntu-upgrade-linux-image-4-15-0-45-generic-lpaeubuntu-upgrade-linux-image-4-15-0-45-lowlatencyubuntu-upgrade-linux-image-4-18-0-1004-gcpubuntu-upgrade-linux-image-4-18-0-1005-kvmubuntu-upgrade-linux-image-4-18-0-1006-awsubuntu-upgrade-linux-image-4-18-0-1007-raspi2ubuntu-upgrade-linux-image-4-18-0-12-genericubuntu-upgrade-linux-image-4-18-0-12-generic-lpaeubuntu-upgrade-linux-image-4-18-0-12-lowlatencyubuntu-upgrade-linux-image-4-18-0-12-snapdragonubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-virtual-hwe-16-04 | Dec 7, 2018 | Oct 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub