Integer overflow

2018-04-2319:29:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.3%

JSON

The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.

CPENameOperatorVersion
ubuntu_linuxeq16.04
ubuntu_linuxeq14.04
ubuntu_linuxeq12.04
ubuntu_linuxeq17.10
debian_linuxeq8.0
debian_linuxeq7.0
debian_linuxeq9.0
linux_kernelge3.4
linux_kernellt3.16.57
linux_kernelge3.17

Name	Operator	Version
ubuntu_linux	eq	16.04
ubuntu_linux	eq	14.04
ubuntu_linux	eq	12.04
ubuntu_linux	eq	17.10
debian_linux	eq	8.0
debian_linux	eq	7.0
debian_linux	eq	9.0
linux_kernel	ge	3.4
linux_kernel	lt	3.16.57
linux_kernel	ge	3.17