UBUNTU-CVE-2018-5332

Details

In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).

Affected Packages(26 packages)

linux

Ubuntu 14.04 LTS

Fixed in:

3.13.0-144.193

linux-aws

Ubuntu 14.04 LTS

Fixed in:

4.4.0-1016.16

linux-lts-xenial

Ubuntu 14.04 LTS

Fixed in:

4.4.0-119.143~14.04.1

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-119.143

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1054.63

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1014.17

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1012.16

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.13.0-41.46~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1020.25

linux-oem

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1022.24

References

REPORT

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c095508770aebf1b9218e77026e48345d719b17c

REPORT

https://github.com/torvalds/linux/commit/c095508770aebf1b9218e77026e48345d719b17c

REPORT

https://ubuntu.com/security/CVE-2018-5332

ADVISORY

https://ubuntu.com/security/notices/USN-3617-1

ADVISORY

https://ubuntu.com/security/notices/USN-3617-2

ADVISORY

https://ubuntu.com/security/notices/USN-3617-3

ADVISORY

https://ubuntu.com/security/notices/USN-3619-1

ADVISORY

https://ubuntu.com/security/notices/USN-3619-2

ADVISORY

https://ubuntu.com/security/notices/USN-3620-1

ADVISORY

https://ubuntu.com/security/notices/USN-3620-2

ADVISORY

https://ubuntu.com/security/notices/USN-3632-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-5332