Use-after-free error in Linux kernel - CVE-2018-14619
Published: August 31, 2018 / Updated: September 3, 2018
Vulnerability identifier: #VU14592
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-14619
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to gain elevated privileges on the target system.
The vulnerability exists in the crypto subsystem of the Linux Kerneldue to incorrect reference to the null skcipher held by each transformation object (TFM), improperly placed when each af_alg_ctx is freed from an affected device. A local attacker can use a custom program, cause the null skcipher to be freed while it is still in use and gain elevated privileges on an affected device.
Affected software
Linux kernel
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
kernel-alt (Red Hat package)
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
kernel-alt (Red Hat package)
How to mitigate CVE-2018-14619
Update to version 4.15-rc4.
Linux kernel - update to 4.15 rc4
kernel-alt (Red Hat package) - update to 4.14.0-115.el7a
kernel-alt (Red Hat package) - update to 4.14.0-115.el7a