NetSight
IP …
high7.8

CVE-2018-5332

In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-base…

Impact

In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.99
from 3.3 before 3.16.54
from 3.17 before 3.18.92
from 3.19 before 4.1.50
from 4.2 before 4.4.112
from 4.5 before 4.9.77
DebianDebian Linux
Versions 7.0, 8.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10

Weakness classification

CWE-787

References