NetSight
medium5.5

CVE-2018-6554

Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users …

Impact

Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.17
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04
DebianDebian Linux
Versions 8.0, 9.0

Weakness classification

References