Published: 11/01/2018 Updated: 22/01/2020

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 438

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

In the Linux kernel up to and including 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 7.0
debian debian linux 8.0
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04
canonical ubuntu linux 17.10
canonical ubuntu linux 12.04

Synopsis Moderate: Red Hat Enterprise MRG Realtime 25 security and enhancement update Type/Severity Security Advisory: Moderate Topic Updated Red Hat Enterprise Messaging, Realtime, and Grid (MRG) Realtime packages that fix multiple security issues and add one enhancement are now available for Red Hat Ente ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2015-9016 Ming Lei reported a race condition in the multiqueue block layer (blk-mq) On a system with a driver using blk-mq (mtip32xx, null_blk, or virtio_blk), a local user might be able ...

Several security issues were fixed in the Linux kernel ...

In the Linux kernel through 41413, the rds_cmsg_atomic() function in 'net/rds/rdmac' mishandles cases where page pinning fails or an invalid address is supplied by a user This can lead to a NULL pointer dereference in rds_atomic_free_op() and thus to a system panic ...

This Metasploit module attempts to gain root privileges on Linux systems by abusing a NULL pointer dereference in the rds_atomic_free_op function in the Reliable Datagram Sockets (RDS) kernel module (rdsko) Successful exploitation requires the RDS kernel module to be loaded If the RDS module is not blacklisted (default); then it will be loaded a ...

CVE-2018-5333

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect