Description
In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-1369-1 | linux security update |
Debian DSA |
DSA-4187-1 | linux security update |
EUVD |
EUVD-2018-17111 | In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c). |
Ubuntu USN |
USN-3617-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3617-2 | Linux (HWE) vulnerabilities |
Ubuntu USN |
USN-3617-3 | Linux kernel (Raspberry Pi 2) vulnerabilities |
Ubuntu USN |
USN-3619-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3619-2 | Linux kernel (Xenial HWE) vulnerabilities |
Ubuntu USN |
USN-3620-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-3620-2 | Linux kernel (Trusty HWE) vulnerabilities |
Ubuntu USN |
USN-3632-1 | Linux kernel (Azure) vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T05:33:43.754Z
Reserved: 2018-01-11T00:00:00.000Z
Link: CVE-2018-5332
No data.
Status : Modified
Published: 2018-01-11T07:29:00.217
Modified: 2024-11-21T04:08:35.897
Link: CVE-2018-5332
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
Debian DSA
EUVD
Ubuntu USN