NetSight
IP …
high7.8

CVE-2018-13406

An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being ab…

Impact

An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.24 before 3.16.58
from 3.17 before 3.18.114
from 3.19 before 4.4.139
from 4.5 before 4.9.111
from 4.10 before 4.14.53
from 4.15 before 4.17.4
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04
DebianDebian Linux
Version 8.0

Weakness classification

CWE-190

References