Privilege escalation in Linux kernel - CVE-2018-8822

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU11228

Privilege escalation in Linux kernel - CVE-2018-8822

Published: March 22, 2018


Vulnerability identifier: #VU11228
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-8822
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists in the ncp_read_kernel function due to incorrect buffer length handling. A local attacker can submit specially crafted data from a malicious NCPFS server, trigger memory corruption and execute arbitrary code with root privileges.

Affected software

Linux kernel
Debian Linux
SUSE Linux
Ubuntu
openSUSE Leap
linux (Ubuntu package)
linux-hwe (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux-oem (Ubuntu package)

How to mitigate CVE-2018-8822

Install update from vendor's website.

linux (Ubuntu package) - addressed in versions 3.13.0-149.199, 4.13.0-43.48
linux-hwe (Ubuntu package) - update to 4.13.0-43.48~16.04.1
linux-gcp (Ubuntu package) - update to 4.13.0-1017.21
linux-azure (Ubuntu package) - update to 4.13.0-1018.21
linux-oem (Ubuntu package) - update to 4.13.0-1028.31

External References

Related Security Bulletins