A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put().
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Aug 28, 2019 | Jan 14, 2018 |
| Debian | debian-upgrade-linux | Jul 30, 2024 | Jan 14, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-kernel | Apr 19, 2018 | Dec 5, 2017 |
| Redhat_linux | — | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Apr 11, 2018 | Jan 14, 2018 |
| Ubuntu | ubuntu-upgrade-linuxubuntu-upgrade-linux-azureubuntu-upgrade-linux-raspi2 | Nov 19, 2024 | Jan 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub