Linux Kernel Multiple Memory Corruption Vulnerabilities (CVE-2018-8822)

Linux Kernel Multiple Memory Corruption Vulnerabilities (CVE-2018-8822)
Linux Kernel Multiple Memory Corruption Vulnerabilities (CVE-2018-8822)

Release date:
Updated on:

Affected Systems:

Linux kernel <= 4.15.11
Linux kernel 4.16-rc-4.16-rc6

Description:

Bugtraq id: 103476
CVE (CAN) ID: CVE-2018-8822

Linux Kernel is the Kernel of the Linux operating system.

In some Linux kernel versions, the fs/ncpfs/ncplib_kernel.c/ncp_read_kernel function and drivers/staging/ncpfs/ncplib_kernel.c have buffer size processing problems. After successful exploitation, the kernel crash or code execution can be.

<* Source: Dan Carpenter (error27@gmail.com)
*>

Suggestion:

Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Netdev@vger.kernel.org/msg223373.html "target =" _ blank "> https://www.mail-archive.com/netdev@vger.kernel.org/msg223373.html
Https://bugzilla.redhat.com/show_bug.cgi? Id = 1558697
Https://access.redhat.com/security/cve/cve-2018-8822
Http://www.kernel.org/

This article permanently updates link: https://www.bkjia.com/Linux/2018-03/151569.htm