Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Oct 30, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Oct 30, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 8, 2022 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools | Apr 2, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Mar 27, 2019 | Oct 30, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headers | Mar 11, 2019 | Oct 30, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 15, 2019 | Oct 18, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 24, 2019 | Oct 30, 2018 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-obs-build | Nov 10, 2018 | Oct 30, 2018 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-3.13.0-165-genericUpgrade linux-image-4.18.0-1004-gcpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.18.0-12-snapdragonUpgrade linux-image-3.13.0-165-powerpc-smpUpgrade linux-image-3.13.0-165-lowlatencyUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.18.0-12-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-165-generic-lpaeUpgrade linux-image-4.18.0-1005-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-1006-awsUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.18.0-12-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-45-genericUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-3.13.0-165-powerpc-e500mcUpgrade linux-image-4.18.0-1007-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-3.13.0-165-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.15.0-1037-azureUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-165-powerpc64-embUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.18.0-12-genericUpgrade linux-image-gkeUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-3.13.0-165-powerpc-e500 | Dec 7, 2018 | Oct 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub