CVE-2017-18017

CVE-2017-18017 affects the Linux kernel’s tcpmss_mangle_packet in net/netfilter/xt_TCPMSS.c. When xt_TCPMSS is used in an iptables action, a remote attacker can trigger a use-after-free and memory corruption, leading to a denial of service. Affected versions are Linux kernel before 4.11, and 4.9....

CVE-2018-1068

CVE-2018-1068 affects the Linux kernel: the 32-bit compatibility layer for ebtables did not sufficiently validate offset values in a 64-bit kernel. A local attacker with CAP_NET_ADMIN (in a namespace) could use this to overwrite kernel memory, potentially leading to privilege escalation. Public a...

CVE-2018-5803

CVE-2018-5803 affects the Linux kernel SCTP chunk handling: a length check flaw in _sctp_make_chunk() (net/sctp/sm_make_chunk.c) can trigger a kernel crash/DoS. Affected kernel versions include 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102. Public advisories (Debian, CentOS/Red Hat, Ubunt...

CVE-2018-8822

The CVE-2018-8822 issue affects the Linux kernel, specifically the ncp_read_kernel handling in fs/ncpfs/ncplib_kernel.c and the corresponding code in drivers/staging/ncpfs/ncplib_kernel.c. The root cause is incorrect buffer length handling, reported for Linux kernel versions up to 4.15.11 and for...

CVE-2018-10675

The CVE-2018-10675 issue affects the Linux kernel prior to 4.12.9, where the do_get_mempolicy function in mm/mempolicy.c allows a local attacker to trigger a use-after-free, leading to denial of service and potentially other impact. Affected versions include kernels compiled into Linux-based prod...

CVE-2018-5332

CVE-2018-5332 affects the Linux kernel up to version 3.2, where rds_message_alloc_sgs() does not validate a value used during DMA page allocation, causing a heap-based out-of-bounds write in net/rds/rdma.c (via rds_rdma_extra_size). Exploitation would rely on local access to trigger DMA-related a...

CVE-2017-7482

CVE-2017-7482 affects the Linux kernel prior to 4.12. When Kerberos 5 tickets are decoded using RXRPC keys, the code incorrectly assumes the size of a field, causing the size-remaining calculation to wrap and the data pointer to extend past the buffer end. This can lead to memory corruption and p...

CVE-2017-18079

CVE-2017-18079 affects the Linux kernel, state: a NULL pointer dereference in drivers/input/serio/i8042.c can crash the system because the port->exists value can change after validation, leading to a denial of service or potentially other impact. Public docs specify the vulnerable condition is...