UBUNTU-CVE-2018-5333

Details

In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.

Affected Packages(21 packages)

linux

Ubuntu 14.04 LTS

Fixed in:

3.13.0-142.191

linux-aws

Ubuntu 14.04 LTS

Fixed in:

4.4.0-1016.16

linux-lts-xenial

Ubuntu 14.04 LTS

Fixed in:

4.4.0-119.143~14.04.1

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-119.143

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1054.63

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1014.17

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1012.16

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.13.0-41.46~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1020.25

linux-oem

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1022.24

References

REPORT

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d11f77f84b27cef452cee332f4e469503084737

REPORT

https://github.com/torvalds/linux/commit/7d11f77f84b27cef452cee332f4e469503084737

REPORT

https://ubuntu.com/security/CVE-2018-5333

ADVISORY

https://ubuntu.com/security/notices/USN-3583-1

ADVISORY

https://ubuntu.com/security/notices/USN-3583-2

ADVISORY

https://ubuntu.com/security/notices/USN-3617-1

ADVISORY

https://ubuntu.com/security/notices/USN-3617-2

ADVISORY

https://ubuntu.com/security/notices/USN-3617-3

ADVISORY

https://ubuntu.com/security/notices/USN-3619-1

ADVISORY

https://ubuntu.com/security/notices/USN-3619-2

ADVISORY

https://ubuntu.com/security/notices/USN-3632-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-5333