NetSight
high7.8

CVE-2018-10675

The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly …

Impact

The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.95
from 3.3 before 3.16.50
from 3.17 before 3.18.67
from 3.19 before 4.1.45
from 4.2 before 4.4.84
from 4.5 before 4.9.45
RedhatVirtualization Host
Version 4.0
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Server Aus
Versions 6.4, 6.5, 6.6, 7.2, 7.3, 7.4
RedhatEnterprise Linux Server Eus
Versions 6.7, 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 6.6, 7.2, 7.3, 7.4, 7.6
RedhatEnterprise Linux Workstation
Version 6.0
CanonicalUbuntu Linux
Version 14.04

Weakness classification

References