NetSight
IP …
high7.8Public exploit code

CVE-2018-17182

An issue was discovered in the Linux kernel through 4.18.8.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.16 before 3.16.58
from 3.17 before 3.18.123
from 3.19 before 4.4.157
from 4.5 before 4.9.128
from 4.10 before 4.14.71
from 4.15 before 4.18.9
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04
DebianDebian Linux
Versions 8.0, 9.0
NetappActive Iq Performance Analytics Services
All versions
NetappElement Software
All versions

Weakness classification

CWE-416

References