NetSight
IP …
high7.8

CVE-2018-8781

The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability all…

Impact

The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.4 before 3.16.57
from 3.17 before 3.18.103
from 3.19 before 4.1.52
from 4.2 before 4.4.125
from 4.5 before 4.9.91
from 4.10 before 4.14.31
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10
DebianDebian Linux
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-190

References