CVEvulnerability
CVE-2018-5344
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-01-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-362, CWE-416
Description
In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.
Affected configurations
• linux linux kernel (<= 4.14.13)
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 17.10
• redhat virtualization 4.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 7.0
• redhat enterprise linux workstation 7.0
Related
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5 Patch, Third Party Advisory
- http://www.securityfocus.com/bid/102503 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:2948 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3083 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3096 Third Party Advisory
- https://github.com/torvalds/linux/commit/ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5 Patch, Third Party Advisory
- https://usn.ubuntu.com/3583-1/ Third Party Advisory
- https://usn.ubuntu.com/3583-2/ Third Party Advisory
- https://usn.ubuntu.com/3617-1/ Third Party Advisory
- https://usn.ubuntu.com/3617-2/ Third Party Advisory
- https://usn.ubuntu.com/3617-3/ Third Party Advisory
- https://usn.ubuntu.com/3619-1/ Third Party Advisory
- https://usn.ubuntu.com/3619-2/ Third Party Advisory
- https://usn.ubuntu.com/3632-1/ Third Party Advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5 Patch, Third Party Advisory
- http://www.securityfocus.com/bid/102503 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:2948 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3083 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3096 Third Party Advisory
- https://github.com/torvalds/linux/commit/ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5 Patch, Third Party Advisory
- https://usn.ubuntu.com/3583-1/ Third Party Advisory
- https://usn.ubuntu.com/3583-2/ Third Party Advisory
- https://usn.ubuntu.com/3617-1/ Third Party Advisory
- https://usn.ubuntu.com/3617-2/ Third Party Advisory
- https://usn.ubuntu.com/3617-3/ Third Party Advisory
- https://usn.ubuntu.com/3619-1/ Third Party Advisory
- https://usn.ubuntu.com/3619-2/ Third Party Advisory
- https://usn.ubuntu.com/3632-1/ Third Party Advisory