A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-05T09:29:51.723Z

Reserved: 2018-07-27T00:00:00

Link: CVE-2018-14619

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-08-30T12:29:01.407

Modified: 2024-11-21T03:49:26.203

Link: CVE-2018-14619

cve-icon Redhat

Severity : Important

Publid Date: 2018-08-28T00:00:00Z

Links: CVE-2018-14619 - Bugzilla

cve-icon OpenCVE Enrichment

No data.