NetSight
IP …
medium5.5

CVE-2018-17972

An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11.

Impact

An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 4.18.11
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 18.10
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Versions 7.0, 7.6
RedhatEnterprise Linux Server Aus
Version 7.6
RedhatEnterprise Linux Server Eus
Version 7.6
RedhatEnterprise Linux Server Tus
Version 7.6
RedhatEnterprise Linux Workstation
Version 7.0
DebianDebian Linux
Version 8.0

Weakness classification

CWE-362

References