CVE-2018-1068
CVE-2018-1068
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
16 Mar 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory.
Affected products
Linux Kernel Organization, Inc. · Linux KernelReferences
https://access.redhat.com/errata/RHSA-2018:1318https://access.redhat.com/errata/RHSA-2018:1355https://access.redhat.com/errata/RHSA-2018:2948https://access.redhat.com/errata/RHSA-2019:1170https://access.redhat.com/errata/RHSA-2019:1190https://access.redhat.com/errata/RHSA-2019:4159https://bugzilla.redhat.com/show_bug.cgi?id=1552048https://github.com/torvalds/linux/commit/b71812168571fa55e44cdd0254471331b9c4c4c6https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b71812168571fa55e44cdd0254471331b9c4c4c6https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlhttps://marc.info/?l=linux-netdev&m=152023808817590&w=2https://marc.info/?l=linux-netdev&m=152025888924151&w=2