Linux Kernel 'net/rds/rdma. c' Local Denial of Service Vulnerability (CVE-2018-5333)

Linux Kernel 'net/rds/rdma. c' Local Denial of Service Vulnerability (CVE-2018-5333)
Linux Kernel 'net/rds/rdma. c' Local Denial of Service Vulnerability (CVE-2018-5333)

Release date:
Updated on:

Affected Systems:

Linux kernel <= 4.14.13

Description:

Bugtraq id: 102510
CVE (CAN) ID: CVE-2018-5333

Linux Kernel is the Kernel of the Linux operating system.

In Linux kernel <= 4.14.13, The rds_cmsg_atomic function is improperly handled and has a security vulnerability in implementation. After successful exploitation, the rds_atomic_free_op NULL pointer can be indirectly referenced.

<* Source: vendor

*>

Suggestion:

Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://bugzilla.redhat.com/show_bug.cgi? Id = 1533891
Https://access.redhat.com/security/cve/CVE-2018-5333
Http://www.kernel.org/
Https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit? Id = 7d11f77f84b27cef452cee332f4e469503084737