A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest under specific conditions can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw privilege escalation cannot be fully ruled out. Versions from v4.16 and newer are vulnerable.

🗓️ 25 Sep 2020 07:00:00Reported by MicrosoftType

Linux kernel vhost_net handle_rx flaw enables out-of-bounds write on kmalloc-8 slab in a virtual host, risking memory corruption.

Reporter	Title	Published	Views	Family All 154
ATTACKERKB	CVE-2018-16880	29 Jan 201916:29	–	attackerkb
BDU FSTEC	The vulnerability of the handle_rx() function in the Linux operating system’s kernel allows a hacker to trigger a memory corruption in the kernel.	22 Mar 201900:00	–	bdu_fstec
CBLMariner	CVE-2018-16880 affecting package kernel 5.10.189.1-1	9 Sep 202115:03	–	cbl_mariner
CBLMariner	CVE-2018-16880 affecting package kernel for versions less than 5.10.78.1-1	9 Apr 202206:52	–	cbl_mariner
CNVD	Linux kernel buffer overflow vulnerability (CNVD-2019-03585)	30 Jan 201900:00	–	cnvd
CVE	CVE-2018-16880	29 Jan 201916:00	–	cve
Cvelist	CVE-2018-16880	29 Jan 201916:00	–	cvelist
Debian CVE	CVE-2018-16880	29 Jan 201916:00	–	debiancve
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2019-1636)	30 May 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1186)	11 Mar 202000:00	–	nessus