CVEvulnerability

CVE-2018-5814

7.0 HIGH Published 2018-06-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-06-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-362

Description

In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling probe, disconnect, and rebind operations can be exploited to trigger a use-after-free condition or a NULL pointer dereference by sending multiple USB over IP packets.

Affected configurations

• linux linux kernel (< 4.4.133) • linux linux kernel (>= 4.5 <= 4.9.102) • linux linux kernel (>= 4.10 <= 4.14.43) • linux linux kernel (>= 4.15 <= 4.16.11) • debian debian linux 8.0 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References