Memory leak in Linux kernel - CVE-2018-19854

Vulnerability identifier: #VU17257

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-19854

CWE-ID: CWE-401

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to perform DoS attack on the target system.

The vulnerability exists due to crypto_report_one() and related functions in crypto/crypto_user.c (the crypto user configuration API) do not fully initialize structures that are copied to userspace. A local attacker can trigger memory leak and perform denial of service attack.

Linux kernel
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
linux-azure (Ubuntu package)
linux-oracle (Ubuntu package)
linux-gcp (Ubuntu package)
linux-aws-hwe (Ubuntu package)
linux (Ubuntu package)
linux-hwe (Ubuntu package)
kernel-rt (Red Hat package)

Install updates from vendor's website.

Linux kernel - update to 4.19.3
linux-azure (Ubuntu package) - addressed in versions 4.15.0-1040.44, 4.15.0-1040.44~14.04.1
linux-oracle (Ubuntu package) - update to 4.15.0-1009.11~16.04.1
linux-gcp (Ubuntu package) - update to 4.15.0-1028.29~16.04.1
linux-aws-hwe (Ubuntu package) - update to 4.15.0-1033.35~16.04.1
linux (Ubuntu package) - update to 4.18.0-15.16
linux-hwe (Ubuntu package) - update to 4.18.0-15.16~18.04.1
kernel-rt (Red Hat package) - update to 4.18.0-147.rt24.93.el8

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f43f39958beb206b53292801e216d9b8a660f087
• https://github.com/torvalds/linux/commit/f43f39958beb206b53292801e216d9b8a660f087
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.3

• Ubuntu update for Linux kernel
• Ubuntu update for Linux kernel (HWE)
• Red Hat Enterprise Linux 8 update for kernel-rt