NetSight
high7.8

CVE-2018-5344

In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acqu…

Impact

In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 4.14.13
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10
RedhatVirtualization
Version 4.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

References