CheckpointCVELIST:CVE-2018-8781CVE-2018-8781
The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.
CNA Affected
[
{
"product": "Linux Kernel",
"vendor": "Check Point Software Technologies Ltd.",
"versions": [
{
"status": "affected",
"version": "kernel version 3.4 and up to and including 4.15"
}
]
}
]References
access.redhat.com/errata/RHSA-2018:2948
access.redhat.com/errata/RHSA-2018:3083
access.redhat.com/errata/RHSA-2018:3096
lists.debian.org/debian-lts-announce/2018/05/msg00000.html
patchwork.freedesktop.org/patch/211845/
research.checkpoint.com/mmap-vulnerabilities-linux-kernel/
usn.ubuntu.com/3654-1/
usn.ubuntu.com/3654-2/
usn.ubuntu.com/3656-1/
usn.ubuntu.com/3674-1/
usn.ubuntu.com/3674-2/
usn.ubuntu.com/3677-1/
usn.ubuntu.com/3677-2/
www.debian.org/security/2018/dsa-4187
www.debian.org/security/2018/dsa-4188
Related
