NULL pointer dereference in Linux kernel - CVE-2018-7492

Vulnerability identifier: #VU10781

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-7492

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists due to a NULL pointer dereference in the net/rds/rdma.c __rds_rdma_map() function. A local attacker can cause the system to crash.

Linux kernel
Debian Linux
Ubuntu
openSUSE Leap
linux (Ubuntu package)
linux-lts-xenial (Ubuntu package)
linux-kvm (Ubuntu package)
linux-aws (Ubuntu package)
linux-snapdragon (Ubuntu package)
linux-hwe (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oem (Ubuntu package)

Update to version 4.14.7.

linux (Ubuntu package) - addressed in versions 3.13.0-151.201, 4.4.0-119.143, 4.13.0-45.50
linux-lts-xenial (Ubuntu package) - update to 4.4.0-119.143~14.04.1
linux-kvm (Ubuntu package) - update to 4.4.0-1020.25
linux-aws (Ubuntu package) - addressed in versions 4.4.0-1016.16, 4.4.0-1054.63
linux-snapdragon (Ubuntu package) - update to 4.4.0-1088.93
linux-hwe (Ubuntu package) - update to 4.13.0-45.50~16.04.1
linux-gcp (Ubuntu package) - update to 4.13.0-1019.23
linux-oem (Ubuntu package) - update to 4.13.0-1030.33

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f3069c6d33f6ae63a16687...

• Denial of service in Linux Kernel
• Debian update for linux
• OpenSUSE Linux update for the Linux Kernel
• Ubuntu update for linux, linux-aws, linux-kvm and more
• Ubuntu update for linux, linux-raspi2
• Ubuntu update for linux
• Ubuntu update for linux-aws, linux-lts-xenial
• Ubuntu update for linux-gcp, linux-hwe, linux-oem