In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).
Advisories
Source ID Title
Debian DLA Debian DLA DLA-1369-1 linux security update
Debian DSA Debian DSA DSA-4187-1 linux security update
EUVD EUVD EUVD-2018-17111 In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).
Ubuntu USN Ubuntu USN USN-3617-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-3617-2 Linux (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-3617-3 Linux kernel (Raspberry Pi 2) vulnerabilities
Ubuntu USN Ubuntu USN USN-3619-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-3619-2 Linux kernel (Xenial HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-3620-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-3620-2 Linux kernel (Trusty HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-3632-1 Linux kernel (Azure) vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-05T05:33:43.754Z

Reserved: 2018-01-11T00:00:00

Link: CVE-2018-5332

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-01-11T07:29:00.217

Modified: 2024-11-21T04:08:35.897

Link: CVE-2018-5332

cve-icon Redhat

Severity : Moderate

Publid Date: 2018-01-02T00:00:00Z

Links: CVE-2018-5332 - Bugzilla

cve-icon OpenCVE Enrichment

No data.