SB2018011818 - Denial of service in Linux Kernel
Published: January 18, 2018
Security Bulletin ID
SB2018011818
Severity
Low
Patch available
YES
Number of vulnerabilities
2
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 2 secuirty vulnerabilities.
1) Memory corruption (CVE-ID: CVE-2018-8087)
The vulnerability allows a local attacker to cause DoS condition on the target system.The weakness exists in the hwsim_new_radio_nl function due to memory leak. A local attacker can trigger memory corruption and cause the service the crash.
2) Double free error (CVE-ID: CVE-2017-18174)
The vulnerability allows a local attacker to cause DoS condition on the target system.The weakness exists in the amd_gpio_remove function due to double free when calling the pinctrl_unregister function. A local attacker can trigger memory corruption and cause the service to crash.
Remediation
Install update from vendor's website.