NetSight
medium6.7

CVE-2018-1068

A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging.

Impact

A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.102
from 3.3 before 3.16.57
from 3.17 before 3.18.100
from 3.19 before 4.1.51
from 4.2 before 4.4.122
from 4.5 before 4.9.88
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10
DebianDebian Linux
Versions 7.0, 8.0, 9.0
RedhatVirtualization Host
Version 4.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Version 7.6
RedhatEnterprise Linux Server Eus
Versions 7.5, 7.6
RedhatEnterprise Linux Server Tus
Version 7.6
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

References