Description
An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-1531-1 | linux-4.9 security update |
Debian DSA |
DSA-4308-1 | linux security update |
EUVD |
EUVD-2018-8956 | An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations. |
Ubuntu USN |
USN-3776-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3776-2 | Linux kernel (Xenial HWE) vulnerabilities |
Ubuntu USN |
USN-3777-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3777-2 | Linux kernel (HWE) vulnerabilities |
Ubuntu USN |
USN-3777-3 | Linux kernel (Azure) vulnerabilities |
References
History
Sat, 12 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T10:39:59.702Z
Reserved: 2018-09-19T00:00:00.000Z
Link: CVE-2018-17182
No data.
Status : Modified
Published: 2018-09-19T09:29:00.620
Modified: 2024-11-21T03:54:02.213
Link: CVE-2018-17182
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
Debian DSA
EUVD
Ubuntu USN