← Back to CVEs

CVE-2018-18445

HIGH

7.8

Description

In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published10/17/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

canonical:ubuntu_linuxlinux:linux_kernelredhat:enterprise_linux_desktopredhat:enterprise_linux_serverredhat:enterprise_linux_server_ausredhat:enterprise_linux_server_eusredhat:enterprise_linux_server_tusredhat:enterprise_linux_workstation

Weaknesses (CWE)

CWE-125

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b799207e1e1816b09e7a5920fbb2d5fcf6edd681(cve@mitre.org)

https://access.redhat.com/errata/RHSA-2019:0512(cve@mitre.org)

https://access.redhat.com/errata/RHSA-2019:0514(cve@mitre.org)

https://bugs.chromium.org/p/project-zero/issues/detail?id=1686(cve@mitre.org)

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.75(cve@mitre.org)

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.13(cve@mitre.org)

https://github.com/torvalds/linux/commit/b799207e1e1816b09e7a5920fbb2d5fcf6edd681(cve@mitre.org)

https://support.f5.com/csp/article/K38456756(cve@mitre.org)

https://usn.ubuntu.com/3832-1/(cve@mitre.org)

https://usn.ubuntu.com/3835-1/(cve@mitre.org)

https://usn.ubuntu.com/3847-1/(cve@mitre.org)

https://usn.ubuntu.com/3847-2/(cve@mitre.org)

https://usn.ubuntu.com/3847-3/(cve@mitre.org)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b799207e1e1816b09e7a5920fbb2d5fcf6edd681(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2019:0512(af854a3a-2127-422b-91ae-364da2661108)

https://access.redhat.com/errata/RHSA-2019:0514(af854a3a-2127-422b-91ae-364da2661108)

https://bugs.chromium.org/p/project-zero/issues/detail?id=1686(af854a3a-2127-422b-91ae-364da2661108)

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.75(af854a3a-2127-422b-91ae-364da2661108)

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.13(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/torvalds/linux/commit/b799207e1e1816b09e7a5920fbb2d5fcf6edd681(af854a3a-2127-422b-91ae-364da2661108)

https://support.f5.com/csp/article/K38456756(af854a3a-2127-422b-91ae-364da2661108)

https://usn.ubuntu.com/3832-1/(af854a3a-2127-422b-91ae-364da2661108)

https://usn.ubuntu.com/3835-1/(af854a3a-2127-422b-91ae-364da2661108)

https://usn.ubuntu.com/3847-1/(af854a3a-2127-422b-91ae-364da2661108)

https://usn.ubuntu.com/3847-2/(af854a3a-2127-422b-91ae-364da2661108)

https://usn.ubuntu.com/3847-3/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.