Out-of-bounds read in Linux kernel - CVE-2017-18344

Vulnerability identifier: #VU14184

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-18344

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: Public exploit is available

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists due to out-of-bounds memory read error in the 'sigevent->sigev_notify' field of show_timer() function in the timer subsystem. A local attacker can obtain potentially sensitive information from system memory.

Linux kernel
SUSE Linux Enterprise Server 11
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux Server - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
Opensuse

MRG Realtime
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
kernel-ec2-base
kernel-syms
kernel-xen-devel
kernel-default
kernel-trace
kernel-xen
kernel-ec2
kernel-ec2-devel
kernel-trace-base
kernel-default-devel
kernel-source
kernel-xen-base
kernel-default-base
kernel-trace-devel
kernel-alt (Red Hat package)
BIG-IQ Centralized Management
BIG-IP DNS
BIG-IP Link Controller
BIG-IP AAM
BIG-IP DDHD
BIG-IP
BIG-IP SSLO
BIG-IP ASM
BIG-IP APM
BIG-IP Analytics
BIG-IP AFM
BIG-IP PEM
BIG-IP LTM
BIG-IP FPS
BIG-IP GTM
BIG-IP Advanced WAF

Update to version 4.14.8.

Linux kernel - update to 4.14.8
kernel (Red Hat package) - addressed in versions 3.10.0-327.76.1.el7, 3.10.0-693.43.1.el7, 3.10.0-862.20.2.el7
kernel-rt (Red Hat package) - update to 3.10.0-693.43.1.rt56.630.el6rt
kernel-ec2-base - update to 3.0.101-108.144.1
kernel-syms - update to 3.0.101-108.144.1
kernel-xen-devel - update to 3.0.101-108.144.1
kernel-default - update to 3.0.101-108.144.1
kernel-trace - update to 3.0.101-108.144.1
kernel-xen - update to 3.0.101-108.144.1
kernel-ec2 - update to 3.0.101-108.144.1
kernel-ec2-devel - update to 3.0.101-108.144.1
kernel-trace-base - update to 3.0.101-108.144.1
kernel-default-devel - update to 3.0.101-108.144.1
kernel-source - update to 3.0.101-108.144.1
kernel-xen-base - update to 3.0.101-108.144.1
kernel-default-base - update to 3.0.101-108.144.1
kernel-trace-devel - update to 3.0.101-108.144.1
kernel-alt (Red Hat package) - update to 4.14.0-115.el7a

• Exploit #6339 - Linux Kernel 4.14.7 (Ubuntu 16.04 / CentOS 7) - (KASLR & SMEP Bypass) Arbitrary File Read (June 17, 2021)

• https://github.com/torvalds/linux/commit/cef31d9af908243421258f1df35a4a644604efbe

• Multiple vulnerabilities in Linux Kernel
• OpenSUSE Linux update for the Linux Kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• Red Hat update for kernel
• OpenSUSE Linux update for the Linux Kernel
• Information disclosure in Linux kernel in F5 BIG-IP products
• SUSE update for the Linux Kernel
• Red Hat Enterprise Linux 7 update for kernel-alt