CVE-2018-10675

HIGH

7.8

CVSS Score

Published: May 2, 2018 at 06:00 PM UTC

Updated: June 17, 2026 at 01:34 AM UTC

9 products affected across 3 vendorsLinux KernelUbuntu LinuxEnterprise Linux Desktop

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.4%

Description

The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

14.04

Linux Kernel · Linux

95%

v < 3.2.953.17 ≤ v < 3.18.673.19 ≤ v < 4.1.453.3 ≤ v < 3.16.504.10 ≤ v < 4.12.94.2 ≤ v < 4.4.844.5 ≤ v < 4.9.45

Affected range stops below 3.16.50, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.18.67, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.2.95, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.1.45, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.12.9, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.4.84, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.45, so it looks safe — our inference, not a vendor statement

Enterprise Linux Desktop · Red Hatrubygems

95%

6.0

Enterprise Linux Server · Red Hatrubygems

95%

6.0

Enterprise Linux Server Aus · Red Hatrubygems

95%

6.4 6.5 6.6 7.2 7.3 7.4 7.6

Enterprise Linux Server Eus · Red Hatrubygems

95%

6.7 7.3 7.4 7.5 7.6

Enterprise Linux Server Tus · Red Hatrubygems

95%

6.6 7.2 7.3 7.4 7.6

Enterprise Linux Workstation · Red Hatrubygems

95%

6.0

Virtualization Host · Red Hat

95%

4.0

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (18)

x_refsource_MISCPatchVendor Advisory

Source: [email protected]

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=73223e4e2e3867ebf033a5a8eb2e5df0158ccc99

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/104093