Description
An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://usn.ubuntu.com/3776-1/ ↗
- https://usn.ubuntu.com/3776-2/ ↗
- https://usn.ubuntu.com/3777-1/ ↗
- https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html ↗
- https://security.netapp.com/advisory/ntap-20190204-0001/ ↗
- https://access.redhat.com/errata/RHSA-2018:3656 ↗
- https://github.com/torvalds/linux/commit/7a9cdebdcc17e426fb5287e4a82db1dfe86339b2 ↗
- https://www.debian.org/security/2018/dsa-4308 ↗
- http://www.securityfocus.com/bid/105417 ↗
- https://www.exploit-db.com/exploits/45497/ ↗
- https://www.openwall.com/lists/oss-security/2018/09/18/4 ↗
- http://www.securitytracker.com/id/1041748 ↗
- https://usn.ubuntu.com/3777-2/ ↗
- http://www.securityfocus.com/bid/106503 ↗
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7a9cdebdcc17e426fb5287e4a82db1dfe86339b2 ↗
- https://usn.ubuntu.com/3777-3/ ↗