Security restrictions bypass in Linux kernel - CVE-2018-16862
Published: November 24, 2018 / Updated: November 26, 2018
Vulnerability identifier: #VU16060
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-16862
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to bypass security restrictions on the target system.
The vulnerability exists due to an error when the cleancache subsystem clears an inode after the final file truncation (removal). A local attacker can supply new file created with the same inode that may contain leftover pages from cleancache and bypass security restrictions to conduct further attacks.
Affected software
Linux kernel
Amazon Linux AMI
Fedora
Opensuse
kernel
kernel-headers
kernel-tools
Amazon Linux AMI
Fedora
Opensuse
kernel
kernel-headers
kernel-tools
How to mitigate CVE-2018-16862
Install update from vendor's website.
kernel - addressed in versions 4.19.5-200.fc28, 4.19.5-300.fc29
kernel-headers - addressed in versions 4.19.5-200.fc28, 4.19.5-300.fc29
kernel-tools - addressed in versions 4.19.5-200.fc28, 4.19.5-300.fc29
kernel-headers - addressed in versions 4.19.5-200.fc28, 4.19.5-300.fc29
kernel-tools - addressed in versions 4.19.5-200.fc28, 4.19.5-300.fc29