CVE-2018-9568

This CVE-2018-9568 entry concerns the Linux kernel socket code: In sk_clone_lock of sock.c, a memory corruption due to type confusion could allow local privilege escalation without user interaction. Affected product/version in the initial doc is Android kernel; connected MiracleLinux advisory con...

CVE-2018-18397

The vulnerability CVE-2018-18397 affects the Linux kernel prior to 4.19.7, where the userfaultfd implementation mishandles access control for certain UFFDIO ioctls (fs/userfaultfd.c and mm/userfaultfd.c). A local attacker with read permissions on a tmpfs file containing holes could write data int...

CVE-2018-5803

CVE-2018-5803 affects the Linux kernel SCTP chunk handling: a length check flaw in _sctp_make_chunk() (net/sctp/sm_make_chunk.c) can trigger a kernel crash/DoS. Affected kernel versions include 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102. Public advisories (Debian, CentOS/Red Hat, Ubunt...

CVE-2018-1068

CVE-2018-1068 affects the Linux kernel: the 32-bit compatibility layer for ebtables did not sufficiently validate offset values in a 64-bit kernel. A local attacker with CAP_NET_ADMIN (in a namespace) could use this to overwrite kernel memory, potentially leading to privilege escalation. Public a...

CVE-2018-20169

CVE-2018-20169 affects the Linux kernel USB subsystem. It stems from missing size checks in __usb_get_extra_descriptor when reading an extra descriptor, potentially enabling denial-of-service (and, per CVSS hints, high impact on confidentiality/integrity/availability). Affected versions: Linux ke...

CVE-2018-1120

CVE-2018-1120 affects the Linux kernel prior to 4.17. By mmap()ing a FUSE-backed file into a process’s memory that contains command line arguments or environment strings, a local attacker can cause utilities that read /proc//cmdline or /proc//environ (e.g., ps, w) to block indefinitely or for a b...

CVE-2018-19854

CVE-2018-19854 affects the Linux kernel pre-4.19.3. In crypto/crypto_user.c (crypto user configuration API), structures copied to userspace are not fully initialized, potentially leaking memory to user processes. This is a regression from CVE-2013-2547 but with easier exploitability, requiring CO...

CVE-2018-10853

CVE-2018-10853: A security flaw in the Linux kernel KVM hypervisor (pre-4.18) where emulation of certain unprivileged instructions (sgdt, sidt, fxsave, fxrstor) did not check CPL, potentially allowing an unprivileged guest process to escalate privileges inside the guest. The CVE is linked to comm...

CVE-2018-10940

CVE-2018-10940 affects the Linux kernel, where cdrom_ioctl_media_changed in drivers/cdrom/cdrom.c allows a local attacker to read kernel memory due to an incorrect bounds check in the CDROM_MEDIA_CHANGED ioctl. The vulnerability exists in versions before the 4.16.6 patch, which was released in th...

CVE-2018-1130

CVE-2018-1130 is a Linux kernel vulnerability: a NULL pointer dereference in dccp_write_xmit() of net/dccp/output.c that can crash the system via crafted system calls, allowing local DoS. The Initial Description notes Linux kernel before 4.16-rc7 as vulnerable; connected advisories (Debian, CentO...

CVE-2018-10675

The CVE-2018-10675 issue affects the Linux kernel prior to 4.12.9, where the do_get_mempolicy function in mm/mempolicy.c allows a local attacker to trigger a use-after-free, leading to denial of service and potentially other impact. Affected versions include kernels compiled into Linux-based prod...

CVE-2018-10879

CVE-2018-10879 is a Linux kernel ext4 use-after-free vulnerability in ext4_xattr_set_entry. A local attacker can trigger a denial of service or other unspecified impact by renaming a file within a crafted ext4 image. The Connected documents corroborate the issue and list multiple advisories, but ...

CVE-2018-10883

The CVE-2018-10883 issue affects the Linux kernel ext4 implementation. A local attacker can cause an out-of-bounds write in jbd2_journal_dirty_metadata() by mounting and operating on a crafted ext4 filesystem image, leading to denial of service and potential system crash. Public sources (USN-3871...

CVE-2018-15594

CVE-2018-15594 affects the Linux kernel arch/x86/paravirt.c, where mishandling of certain indirect calls weakens Spectre-v2 mitigations for paravirtual guests. The issue is addressed in kernel updates up to 4.18.1 (ChangeLog-4.18.1, commit 5800dc5c…). In practice, vulnerable systems running affec...

CVE-2018-10878

CVE-2018-10878 is confirmed in the Linux kernel ext4 filesystem. The connected Nessus advisories reference a local attacker mounting a crafted ext4 image to trigger an out-of-bounds write, leading to denial of service and potential other impacts. Unity Linux UTSA advisories (e.g., UTSA-2026-00113...

CVE-2018-10880

CVE-2018-10880 is a Linux kernel/ext4 vulnerability: a stack-out-of-bounds write in ext4_update_inline_data() when mounting or writing to a crafted ext4 image, leading to a potential system crash and DoS. The issue originates from insufficient bounds checking in ext4’s handling of inline data dur...

CVE-2018-6927

CVE-2018-6927 concerns the Linux kernel futex_requeue implementation in kernel/futex.c. Multiple connected documents confirm a flaw where triggering a negative wake or requeue value can cause a denial of service via an integer overflow. Affected are kernel versions prior to 4.14.15 (and related u...

CVE-2017-18344

CVE-2017-18344 affects the Linux kernel before 4.14.8. The timer_create syscall in kernel/time/posix-timers.c fails to validate sigevent->sigev_notify, causing out-of-bounds access in show_timer when /proc/$PID/timers is read and enabling a local user to read arbitrary kernel memory on builds ...

CVE-2018-18021

CVE-2018-18021 affects arch/arm64/kvm/guest.c in the Linux kernel before 4.18.12. The KVM_SET_ON_REG ioctl is mishandled, allowing a local attacker who can create VMs to arbitrarily redirect the hypervisor flow of control (full register control) and potentially cause a hypervisor panic via an ill...

CVE-2018-10881

CVE-2018-10881 is an ext4-related Linux kernel vulnerability: out-of-bounds access in ext4_get_group_info when mounting/operating on a crafted ext4 image, leading to denial of service or system crash. Connected sources (e.g., USN-3752-2) confirm this CVE is among kernel/ext4 issues addressed; rem...

CVE-2018-5814

CVE-2018-5814 : Linux Kernel before 4.16.11, 4.14.43, 4.9.102, and 4.4.133 has race condition vulnerabilities in USB handling (probe, disconnect, rebind) that can trigger use-after-free or NULL dereference via multiple USB over IP packets. Fixes were released in kernel updates: 4.16.11, 4.14.43, ...

CVE-2018-16658

The CVE-2018-16658 entry concerns the Linux kernel prior to 4.18.6, where a vulnerability in cdrom_ioctl_drive_status() in drivers/cdrom/cdrom.c allows a local attacker to read kernel memory due to an unsafe cast from unsigned long to int that bypasses bounds checks. The issue is mitigated by upg...

CVE-2017-18203

The vulnerability CVE-2017-18203 affects the Linux kernel in the DM (device-mapper) path: dm_get_from_kobject() in drivers/md/dm.c is vulnerable to a race with __dm_destroy during creation/removal of DM devices. Exploitation from a local attacker could cause a Denial of Service. Affected are kern...

CVE-2017-18208

CVE-2017-18208 affects the Linux kernel prior to 4.14.4. The vulnerability lies in the MADVISE_WILLNEED handling in mm/madvise.c, where triggering MADVISE_WILLNEED for a DAX mapping allows a local attacker to cause a denial of service via an infinite loop. The issue is local in scope and is tied ...

CVE-2017-18241

CVE-2017-18241 affects Linux kernel fs/f2fs/segment.c prior to 4.13. Local users can cause a denial of service via a NULL pointer dereference in a flush_cmd_control when using the noflush_merge option, leading to a panic. No exploitation details are provided in the documents. Remediation: upgrade...

CVE-2018-6554

CVE-2018-6554 describes a memory leak in the Linux kernel’s irda_bind path (net/irda/af_irda.c and later staging/irda/net/af_irda.c). A local user can cause memory exhaustion by repeatedly binding an AF_IRDA socket, leading to denial of service. The vulnerability exists in kernels prior to 4.17 a...

CVE-2018-18690

CVE-2018-18690 pertains to the Linux kernel before 4.17 where a local attacker able to set attributes on an xfs filesystem could render the filesystem non-operational until remount by triggering an unchecked error during an xfs attribute change. The root cause is mishandling of ATTR_REPLACE in xf...

CVE-2017-18216

CVE-2017-18216 affects the Linux kernel's OCFS2 nodemanager.c: a required mutex is not used, enabling local attackers to trigger a NULL pointer dereference/BUG and cause denial of service. The issue exists in kernel versions before 4.15. Exploitation is local; no remote vector noted in the provid...

CVE-2017-7518

CVE-2017-7518: In the Linux kernel before 4.12, the KVM module mishandles the trap-flag TF in EFLAGS during syscall emulation, causing a debug exception (#DB) on the guest stack. This could allow a user/process inside a guest to escalate privileges within the guest (Linux guests only; host kernel...

CVE-2017-18174

In Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls pinctrl_unregister, leading to a double free. Affected: kernels prior to 4.7 (various distributions). The issue was addressed in later kernel updates (e.g., commits from Linus Torvalds’ tree referenced...

CVE-2017-18249

CVE-2017-18249 affects the Linux kernel’s f2fs implementation: the add_free_nid function in fs/f2fs/node.c fails to properly track an allocated nid, enabling local attackers to cause a denial of service via a race condition (and potentially other impact) when multiple threads run concurrently. Af...

CVE-2017-18257

CVE-2017-18257 affects the Linux kernel: the __get_data_block function in fs/f2fs/data.c (before 4.11) can be triggered by crafted open and fallocate calls via an FS_IOC_FIEMAP ioctl, causing local denial of service (integer overflow and loop). Public advisories from Unity Linux, Ubuntu USN-3696-...

CVE-2018-10021

CVE-2018-10021 affects the Linux kernel’s SAS SCSI host driver (drivers/scsi/libsas/sas_scsi_host.c) prior to 4.16. A local user can trigger certain failure conditions to cause a denial of service (ata_qc leak). A third party disputes the report’s relevance, noting the issue can occur only with p...

CVE-2017-7482

CVE-2017-7482 affects the Linux kernel prior to 4.12. When Kerberos 5 tickets are decoded using RXRPC keys, the code incorrectly assumes the size of a field, causing the size-remaining calculation to wrap and the data pointer to extend past the buffer end. This can lead to memory corruption and p...

CVE-2018-5332

CVE-2018-5332 affects the Linux kernel up to version 3.2, where rds_message_alloc_sgs() does not validate a value used during DMA page allocation, causing a heap-based out-of-bounds write in net/rds/rdma.c (via rds_rdma_extra_size). Exploitation would rely on local access to trigger DMA-related a...

CVE-2018-15572

CVE-2018-15572: Linux kernel

CVE-2017-2618

CVE-2017-2618 is a Linux kernel local vulnerability caused by how SELinux attributes are cleared on /proc/pid/attr. An empty write to that file can crash the system by triggering access to unmapped kernel memory. The connected Nessus entries (Unity Linux, MiracleLinux AXSA advisory, and related p...

CVE-2018-20511

The CVE-2018-20511 vulnerability affects Linux kernel older than 4.18.11, where ipddp_ioctl in drivers/net/appletalk/ipddp.c allows local users with CAP_NET_ADMIN to read the ipddp_route and next fields via SIOCFINDIPDDPRT, leading to kernel address disclosure (information leakage). Unity/Linux a...

CVE-2018-7492

The CVE-2018-7492 entry affects the Linux kernel prior to 4.14.7, where a NULL pointer dereference in net/rds/rdma.c __rds_rdma_map() can be triggered by local attackers via RDS_GET_MR / RDS_GET_MR_FOR_DEST. This leads to a system panic and denial-of-service. Affected versions are exposed to loca...

CVE-2018-6555

CVE-2018-6555 is a Linux kernel local use-after-free via the irda_setsockopt path in irda/af_irda.c (and later in staging/irda), potentially causing memory corruption, denial of service, or a system crash. Affected trees reference IRDA socket usage as the attack vector. The vulnerability is addre...

CVE-2018-18386

The CVE-2018-18386 issue affects the Linux kernel up to version 4.14.10, in drivers/tty/n_tty.c, where an EXTPROC vs ICANON confusion in TIOCINQ allows local attackers with access to pseudo terminals to hang or block further use of any PTY. The root cause is a terminal/TTY handling inconsistency,...

CVE-2018-10124

CVE-2018-10124 affects the Linux kernel before 4.13, where the kill_something_info() function in kernel/signal.c may allow a local attacker to cause a denial of service via an INT_MIN argument when using an unspecified architecture and compiler. The vulnerability is a local DoS condition (availab...

CVE-2018-10901

CVE-2018-10901 affects the Linux kernel’s KVM virtualization subsystem. The VMX path fails to restore the guest GDT.LIMIT to the host value, setting it to 64KB instead. This can allow a host userspace process to corrupt GDT entries (notably per-cpu variables), enabling local privilege escalation....

CVE-2017-18204

CVE-2017-18204 affects the Linux kernel via ocfs2_setattr in fs/ocfs2/file.c, exploitable by local users to cause a denial-of-service (deadlock) when using DIO. The vulnerability exists in kernel versions before 4.14.2; Ubuntu advisories (USN 3617-3 and related) and Unity Linux advisories referen...

CVE-2018-10087

CVE-2018-10087 is present in the MiracleLinux kernel package listed in AXSA:2024-8953:34. The advisory shows a local DoS risk due to the kernel_wait4 function in kernel/exit.c triggering undefined behavior when using -INT_MIN on an unspecified architecture/compiler. The connected Nessus entry ide...

CVE-2017-18255

CVE-2017-18255 affects the Linux kernel: the perf_cpu_time_max_percent_handler in kernel/events/core.c (pre-4.11) can be triggered by a large value, causing a denial of service via integer overflow (and potential unspecified impact). It requires local access. A fix is available in kernel 4.11 and...

CVE-2017-18270

CVE-2017-18270 refers to a local-kernel vulnerability in Linux kernels prior to 4.13.5 where a local user could create keyrings for other users via keyctl, enabling setting unwanted defaults or causing a denial of service. The issue is fixed in Linux kernel 4.13.5 (as indicated by the ChangeLog r...

CVE-2017-18222

CVE-2017-18222 affects the Linux kernel before 4.12, where the Hisilicon Network Subsystem (HNS) ETH_SS_PRIV_FLAGS handling during sset_count retrieval can cause local denial of service via buffer overflow/memory corruption and potentially other impacts due to incompatibility with ethtool_get_str...

CVE-2017-18193

The CVE-2017-18193 issue is in the Linux kernel’s F2FS extent_cache.c (before 4.13). It mishandles extent trees, enabling a local, multi-threaded application to trigger a denial of service. Connected advisories (Unity Linux and OpenVAS/Open Nessus entries) confirm the affected component and impac...

CVE-2018-16597

CVE-2018-16597 affects the Linux kernel prior to version 4.8. The issue is an incorrect access check in overlayfs mounts, which could allow a local attacker to modify or truncate files on the underlying filesystem. The connected Nessus/OpenVAS advisories reference kernel updates to fix this vulne...