CVE-2018-16884
- State
- Published
- Severity
- 6.5 Medium
- Published
- Dec 18, 2018
- Updated
- Aug 5, 2024
- Reserved
- Sep 11, 2018
Description
A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 6.5 Medium | CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
kernel:[UNKNOWN] |
|
References
- 106253vdb-entry
- [debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security updatemailing-list
- [debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression updatemailing-list
- USN-3932-1vendor-advisory
- USN-3932-2vendor-advisory
- [debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security updatemailing-list
- USN-3981-1vendor-advisory
- USN-3980-1vendor-advisory
- USN-3980-2vendor-advisory
- USN-3981-2vendor-advisory
- RHSA-2019:1873vendor-advisory
- RHSA-2019:1891vendor-advisory
- RHSA-2019:2696vendor-advisory
- RHSA-2019:2730vendor-advisory
- RHSA-2019:3309vendor-advisory
- RHSA-2019:3517vendor-advisory
- RHSA-2020:0204vendor-advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16884
- https://patchwork.kernel.org/patch/10733769/
- https://patchwork.kernel.org/cover/10733767/
- https://support.f5.com/csp/article/K21430012
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.