The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.
CPE | Name | Operator | Version |
---|---|---|---|
ubuntu_linux | eq | 16.04 | |
ubuntu_linux | eq | 14.04 | |
ubuntu_linux | eq | 12.04 | |
ubuntu_linux | eq | 17.10 | |
debian_linux | eq | 8.0 | |
debian_linux | eq | 7.0 | |
debian_linux | eq | 9.0 | |
linux_kernel | ge | 3.4 | |
linux_kernel | lt | 3.16.57 | |
linux_kernel | ge | 3.17 |
access.redhat.com/errata/RHSA-2018:2948
access.redhat.com/errata/RHSA-2018:3083
access.redhat.com/errata/RHSA-2018:3096
lists.debian.org/debian-lts-announce/2018/05/msg00000.html
patchwork.freedesktop.org/patch/211845/
research.checkpoint.com/mmap-vulnerabilities-linux-kernel/
usn.ubuntu.com/3654-1/
usn.ubuntu.com/3654-2/
usn.ubuntu.com/3656-1/
usn.ubuntu.com/3674-1/
usn.ubuntu.com/3674-2/
usn.ubuntu.com/3677-1/
usn.ubuntu.com/3677-2/
www.debian.org/security/2018/dsa-4187
www.debian.org/security/2018/dsa-4188