CVE-2018-10675

moderate-risk
Published 2018-05-02

The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.

Do I need to act?

-
0.04% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10 High
LOCAL / LOW complexity

Affected Products (20)

Affected Vendors

Redhat Linux Canonical

References (36)

Patch http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=73223e...
Third Party Advisory http://www.securityfocus.com/bid/104093
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2164
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2384
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2395
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2785
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2791
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2924
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2925
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2933
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:3540
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:3586
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:3590
Patch https://github.com/torvalds/linux/commit/73223e4e2e3867ebf033a5a8eb2e5df0158ccc9...
Third Party Advisory https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+Struxur...
Third Party Advisory https://usn.ubuntu.com/3754-1/
Release Notes https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9
Third Party Advisory https://www.oracle.com/security-alerts/cpujul2020.html
Patch http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=73223e...
Third Party Advisory http://www.securityfocus.com/bid/104093
and 16 more references
45
/ 100
moderate-risk
Severity 24/34 · High
Exploitability 0/34 · Minimal
Exposure 21/34 · High