Early Access — Mondoo Vulnerability Intelligence is currently in preview.

UBUNTU-CVE-2018-14625 | Mondoo Vulnerability Intelligence

UBUNTU-CVE-2018-14625

HIGH7.0

A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may all

Published Sep 10, 2018

Modified 7 months ago

Fix available

Details

A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients.

Affected Packages

Ubuntu:14.04:LTSlinux

Fixed in:

3.11.0-12.19

Ubuntu:20.04:LTSlinux

Affected versions:

5.3.0-18.195.3.0-24.26

Fixed in:

5.4.0-9.12

Ubuntu:16.04:LTSlinux

Fixed in:

4.2.0-16.19

Ubuntu:18.04:LTSlinux

Affected versions:

4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.114.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.21+13 more

Fixed in:

4.15.0-44.47

Ubuntu:16.04:LTSlinux-aws

Fixed in:

4.4.0-1001.10

Ubuntu:18.04:LTSlinux-aws

Affected versions:

4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.74.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.17+8 more

Fixed in:

4.15.0-1032.34

Ubuntu:14.04:LTSlinux-aws

Fixed in:

4.4.0-1002.2

Ubuntu:20.04:LTSlinux-aws

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.11

Fixed in:

5.4.0-1005.5

Ubuntu:18.04:LTSlinux-aws-5.0

Fixed in:

5.0.0-1021.24~18.04.1

Ubuntu:18.04:LTSlinux-aws-5.3

Fixed in:

5.3.0-1016.17~18.04.1

Ubuntu:16.04:LTSlinux-aws-hwe

Affected versions:

4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.1

Fixed in:

4.15.0-1032.34~16.04.1

Ubuntu:20.04:LTSlinux-azure

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.10

Fixed in:

5.4.0-1006.6

Ubuntu:18.04:LTSlinux-azure

Affected versions:

4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.94.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.19+10 more

Fixed in:

4.15.0-1037.39

Ubuntu:16.04:LTSlinux-azure

Affected versions:

4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.154.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.12+19 more

Fixed in:

4.15.0-1037.39~16.04.1

Ubuntu:14.04:LTSlinux-azure

Affected versions:

4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.24.15.0-1036.38~14.04.2

Fixed in:

4.15.0-1037.39~14.04.2

Ubuntu:18.04:LTSlinux-azure-4.15

Fixed in:

4.15.0-1082.92

Ubuntu:18.04:LTSlinux-azure-5.3

Fixed in:

5.3.0-1007.8~18.04.1

Ubuntu:16.04:LTSlinux-euclid

Fixed in:

4.4.0-9019.20

Ubuntu:16.04:LTSlinux-gcp

Affected versions:

4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.94.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.15+15 more

Fixed in:

4.15.0-1027.28~16.04.1

Ubuntu:20.04:LTSlinux-gcp

Affected versions:

5.3.0-1004.45.3.0-1009.105.3.0-1011.12

Fixed in:

5.4.0-1005.5

Ubuntu:18.04:LTSlinux-gcp

Affected versions:

4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.84.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.18+7 more

Fixed in:

4.15.0-1027.28

Ubuntu:18.04:LTSlinux-gcp-5.3

Fixed in:

5.3.0-1008.9~18.04.1

Ubuntu:Pro:18.04:LTSlinux-gcp-edge

Affected versions:

4.18.0-1004.5~18.04.14.18.0-1005.6~18.04.14.18.0-1006.7~18.04.14.18.0-1007.8~18.04.14.18.0-1008.9~18.04.14.18.0-1009.10~18.04.14.18.0-1011.12~18.04.14.18.0-1012.13~18.04.14.18.0-1013.14~18.04.14.18.0-1015.16~18.04.1+2 more

Ubuntu:18.04:LTSlinux-gke-4.15

Fixed in:

4.15.0-1030.32

Ubuntu:18.04:LTSlinux-gke-5.0

Fixed in:

5.0.0-1011.11~18.04.1

Ubuntu:18.04:LTSlinux-gke-5.3

Fixed in:

5.3.0-1011.12~18.04.1

Ubuntu:18.04:LTSlinux-hwe

Affected versions:

4.18.0-13.14~18.04.1

Fixed in:

4.18.0-14.15~18.04.1

Ubuntu:16.04:LTSlinux-hwe

Affected versions:

4.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.1+35 more

Fixed in:

4.15.0-45.48~16.04.1

Ubuntu:18.04:LTSlinux-hwe-edge

Fixed in:

5.0.0-15.16~18.04.1

Ubuntu:20.04:LTSlinux-kvm

Affected versions:

5.3.0-1003.35.3.0-1008.95.3.0-1009.10

Fixed in:

5.4.0-1004.4

Ubuntu:18.04:LTSlinux-kvm

Affected versions:

4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.84.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.17+8 more

Fixed in:

4.15.0-1029.29

Ubuntu:16.04:LTSlinux-kvm

Fixed in:

4.4.0-1004.9

Ubuntu:14.04:LTSlinux-lts-xenial

Fixed in:

4.4.0-13.29~14.04.1

Ubuntu:18.04:LTSlinux-oem

Affected versions:

4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.124.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.21+5 more

Fixed in:

4.15.0-1033.38

Ubuntu:20.04:LTSlinux-oem-5.6

Fixed in:

5.6.0-1007.7

Ubuntu:18.04:LTSlinux-oem-osp1

Fixed in:

5.0.0-1010.11

Ubuntu:16.04:LTSlinux-oracle

Affected versions:

4.15.0-1007.9~16.04.1

Fixed in:

4.15.0-1008.10~16.04.1

Ubuntu:20.04:LTSlinux-oracle

Affected versions:

5.3.0-1002.25.3.0-1007.85.3.0-1008.9

Fixed in:

5.4.0-1005.5

Ubuntu:18.04:LTSlinux-oracle

Affected versions:

4.15.0-1007.9

Fixed in:

4.15.0-1008.10

Ubuntu:18.04:LTSlinux-oracle-5.0

Fixed in:

5.0.0-1007.12~18.04.1

Ubuntu:18.04:LTSlinux-oracle-5.3

Fixed in:

5.3.0-1011.12~18.04.1

Ubuntu:20.04:LTSlinux-raspi

Fixed in:

5.4.0-1007.7

Ubuntu:18.04:LTSlinux-raspi2

Affected versions:

4.13.0-1005.54.13.0-1006.64.13.0-1008.84.15.0-1006.74.15.0-1009.104.15.0-1010.114.15.0-1011.124.15.0-1012.134.15.0-1013.144.15.0-1017.18+10 more

Fixed in:

4.15.0-1031.33

Ubuntu:16.04:LTSlinux-raspi2

Fixed in:

4.2.0-1013.19

Ubuntu:20.04:LTSlinux-raspi2

Affected versions:

5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.19

Fixed in:

5.4.0-1004.4

Ubuntu:Pro:20.04:LTSlinux-raspi2

Affected versions:

5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6

Ubuntu:18.04:LTSlinux-raspi2-5.3

Fixed in:

5.3.0-1017.19~18.04.1

Ubuntu:20.04:LTSlinux-riscv

Fixed in:

5.4.0-24.28

Ubuntu:16.04:LTSlinux-snapdragon

Affected versions:

4.4.0-1012.124.4.0-1013.144.4.0-1013.154.4.0-1015.184.4.0-1019.22

Fixed in:

4.4.0-1020.23

Ubuntu:18.04:LTSlinux-snapdragon

Fixed in:

4.4.0-1077.82

References

REPORThttps://lore.kernel.org/lkml/000000000000b4f77905723b70ee@google.com/REPORThttps://lore.kernel.org/lkml/?q=%22syzbot%2Bbd391451452fb0b93039%40syzkaller.appspotmail.com%22 REPORThttps://syzkaller.appspot.com/bug?extid=bd391451452fb0b93039 REPORThttps://ubuntu.com/security/CVE-2018-14625 REPORThttps://ubuntu.com/security/notices/USN-3871-1 REPORThttps://ubuntu.com/security/notices/USN-3871-3 REPORThttps://ubuntu.com/security/notices/USN-3871-4 REPORThttps://ubuntu.com/security/notices/USN-3871-5 REPORThttps://ubuntu.com/security/notices/USN-3872-1 REPORThttps://ubuntu.com/security/notices/USN-3878-1 REPORThttps://ubuntu.com/security/notices/USN-3878-2 REPORThttps://www.cve.org/CVERecord?id=CVE-2018-14625

CVSS Analysis

CVSS v3.0

7.0

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Related

CVE-2018-14625 USN-3871-1 USN-3871-3 USN-3871-4 USN-3871-5 USN-3872-1 USN-3878-1 USN-3878-2

Ecosystems

Ubuntu 14.04 LTS Ubuntu 20.04 LTS Ubuntu 16.04 LTS Ubuntu 18.04 LTS Ubuntu Pro 18.04 LTS Ubuntu Pro 20.04 LTS

Timeline

PublishedSep 10, 2018

ModifiedJun 10, 2025