CVE-2018-6555

2018-09-0400:00:00

CWE-416

canonical

www.cve.org

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket.

CNA Affected

[
  {
    "product": "Linux Kernel",
    "vendor": "Linux Kernel",
    "versions": [
      {
        "status": "affected",
        "version": "before 4.17"
      }
    ]
  }
]