CVE-2018-1068
CVE-2018-1068
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
16 mar 2018Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory.
Productos afectados
Linux Kernel Organization, Inc. · Linux KernelReferencias
https://access.redhat.com/errata/RHSA-2018:1318https://access.redhat.com/errata/RHSA-2018:1355https://access.redhat.com/errata/RHSA-2018:2948https://access.redhat.com/errata/RHSA-2019:1170https://access.redhat.com/errata/RHSA-2019:1190https://access.redhat.com/errata/RHSA-2019:4159https://bugzilla.redhat.com/show_bug.cgi?id=1552048https://github.com/torvalds/linux/commit/b71812168571fa55e44cdd0254471331b9c4c4c6https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b71812168571fa55e44cdd0254471331b9c4c4c6https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlhttps://marc.info/?l=linux-netdev&m=152023808817590&w=2https://marc.info/?l=linux-netdev&m=152025888924151&w=2