CVE-2018-10675

Public on 2018-04-19
Modified on 2019-01-25
Description
The do_get_mempolicy() function in mm/mempolicy.c in the Linux kernel allows local users to hit a use-after-free bug via crafted system calls and thus cause a denial of service (DoS) or possibly have unspecified other impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.
Severity
Important severity
Important
CVSS v3 Base Score
5.5
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
HAQM Linux 1 kernel 2018-05-25 ALAS-2018-1023 Fixed
HAQM Linux 2 - Core kernel 2018-04-19 ALAS2-2018-994 Fixed

CVSS Scores

Score Type Score Vector
HAQM Linux CVSSv3 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD CVSSv2 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C
NVD CVSSv3 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H