#VU13563 Integer overflow in Linux kernel


Vulnerability identifier: #VU13563

Vulnerability risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2018-5848

CWE-ID: CWE-190

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists In the function wmi_set_ie() due to the length validation code does not handle unsigned integer overflow properly. A local attacker can supply a large value of the 'ie_len' argument, trigger memory corruption and gain root privileges.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: 4.17 - 4.17.4

External links
http://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


SUSE Linux update for the Linux Kernel
OpenSUSE Linux update for the Linux Kernel