Memory corruption in Linux kernel - CVE-2018-7740
Published: March 12, 2018 / Updated: March 20, 2018
Vulnerability identifier: #VU10922
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-7740
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to cause DoS condition no the target system.
The weakness exists in the resv_map_release function due to boundary error when handling user-supplied input. A local attacker can execute an application that submits malicious input, trigger memory corruption and cause the system to crash.
The weakness exists in the resv_map_release function due to boundary error when handling user-supplied input. A local attacker can execute an application that submits malicious input, trigger memory corruption and cause the system to crash.
Affected software
Linux kernel
Debian Linux
SUSE Linux
Debian Linux
SUSE Linux
How to mitigate CVE-2018-7740
Cybersecurity Help is currently unaware of any solutions addressing the vulnerability.