Published: 26/11/2018 Updated: 09/10/2019

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The Linux kernel prior to 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 4.15
linux linux kernel
redhat enterprise linux desktop 7.0
redhat enterprise linux server tus 7.6
redhat enterprise linux server eus 7.5
redhat enterprise linux server 7.0
redhat enterprise linux server eus 7.6
redhat enterprise linux server aus 7.6
redhat enterprise linux workstation 7.0

Synopsis Moderate: kernel-rt security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS ...

Synopsis Moderate: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Syst ...

Synopsis Moderate: kernel security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for kernel is now available for Red Hat Enterprise Linux 75 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability ...

The Linux kernel was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlinkc file A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service ...

CWE-476 https://marc.info/?l=linux-netdev&m=151500466401174&w=2 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f428fe4a04cc339166c8bbd489789760de3a0cee https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14646 https://access.redhat.com/errata/RHSA-2018:3666 https://access.redhat.com/errata/RHSA-2018:3651 https://access.redhat.com/errata/RHSA-2018:3843 https://access.redhat.com/errata/RHSA-2018:3666 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2018-14646

CVE-2018-14646

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect