Improper input validation in Linux kernel - CVE-2018-1120

Vulnerability identifier: #VU12853

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-1120

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: Public exploit is available

The vulnerability allows a local user to cause DoS condition on the target system.

The weakness exists due to insufficient validation of user-supplied input. A local user can block any read() access to /proc/PID/cmdline by mmap()ing a FUSE file (Filesystem in Userspace) onto this process's command-line arguments, block pgrep, pidof, pkill, ps, and w, either forever (a denial of service), or for some controlled time (a synchronization tool for exploiting other vulnerabilities).

Linux kernel
Gentoo Linux
Amazon Linux AMI
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Fedora
Opensuse
procps
Traffix SDC
MRG Realtime
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
kernel-alt (Red Hat package)
kernel
BIG-IQ Centralized Management
BIG-IP AFM
BIG-IP PEM
BIG-IP GTM
BIG-IP Analytics
BIG-IP FPS
BIG-IP APM
BIG-IP LTM
BIG-IP ASM
BIG-IP
BIG-IP DDHD
BIG-IP SSLO
BIG-IP DNS
BIG-IP AAM
BIG-IP Link Controller
BIG-IP Advanced WAF

Update to version 4.11.

Linux kernel - update to 4.4.168
kernel (Red Hat package) - update to 3.10.0-693.76.1.el7
kernel-rt (Red Hat package) - update to 3.10.0-693.76.1.rt56.676.el6rt
kernel-alt (Red Hat package) - update to 4.14.0-115.el7a
kernel - addressed in versions 4.16.10-200.fc27, 4.16.10-300.fc28, 4.16.11-200.fc27

• Exploit #6364 - Procps-ng - Multiple Vulnerabilities (June 17, 2021)

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7f7ccc2ccc2e70c6054685...
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.168

• Denial of service in Linux Kernel
• Multiple vulnerabilities in procps
• Gentoo update for procps
• Amazon Linux AMI update for kernel
• Amazon Linux AMI update for kernel
• OpenSUSE Linux update for the Linux Kernel
• Red Hat Enterprise MRG 2 update for kernel-rt
• Red Hat Enterprise Linux 7 update for kernel
• Denial of service in F5 Networks BIG-IP products
• Denial of service in F5 BIG-IQ Centralized Management
• Denial of service in F5 Traffix SDC
• Fedora 28 update for kernel
• Fedora 27 update for kernel
• Fedora 27 update for kernel
• Red Hat Enterprise Linux 7 update for kernel-alt