A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest under specific conditions can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw privilege escalation cannot be fully ruled out. Versions from v4.16 and newer are vulnerable.

🗓️ 25 Sep 2020 07:00:00Reported by MicrosoftType

Linux kernel vhost_net handle_rx flaw enables out-of-bounds write on kmalloc-8 slab in a virtual host, risking memory corruption.

Reporter	Title	Published	Views	Family All 152
attackerkb	CVE-2018-16880	29 Jan 201916:29	–	attackerkb
BDU FSTEC	Linux kernel Handle Rx Memory Corruption	22 Mar 201900:00	–	bdu_fstec
CBLMariner	CVE-2018-16880 affecting package kernel 5.10.189.1-1	9 Sep 202115:03	–	cbl_mariner
CBLMariner	CVE-2018-16880 affecting package kernel for versions less than 5.10.78.1-1	9 Apr 202206:52	–	cbl_mariner
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0009)	1 Oct 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2019-1636)	30 May 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1186)	11 Mar 202000:00	–	nessus
Tenable Nessus	Fedora 28 : kernel / kernel-headers / kernel-tools (2019-4002b91800)	1 Feb 201900:00	–	nessus
Tenable Nessus	Fedora 29 : kernel / kernel-headers / kernel-tools (2019-aabdaa013d)	1 Feb 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : the Linux Kernel (openSUSE-2019-1404) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	17 May 201900:00	–	nessus