Tracker / CVE-2018-16884
CVE-2018-16884
High 8.0
A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.
Affected products and versions
| canonical | ubuntu_linux |
|---|---|
| debian | debian_linux |
| linux | linux_kernel · 3.17 → 3.18.133 |
| linux | linux_kernel · 3.19 → 4.4.171 |
| linux | linux_kernel · 3.7 → 3.16.65 |
| linux | linux_kernel · 4.10 → 4.14.94 |
| linux | linux_kernel · 4.15 → 4.19.16 |
| linux | linux_kernel · 4.20 → 4.20.3 |
| linux | linux_kernel · 4.5 → 4.9.151 |
| redhat | enterprise_linux |
| redhat | enterprise_mrg |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.