vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2018-18397

N/A
Published: December 12, 2018 at 07:00 AM UTC
Updated: June 17, 2026 at 01:47 AM UTC
10 products affected across 3 vendorsLinux KernelUbuntu LinuxEnterprise Linux Desktop

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.5%

Description

The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains holes), related to fs/userfaultfd.c and mm/userfaultfd.c.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (14)

x_refsource_MISCPatchThird Party Advisory
Source: [email protected]
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=29ec90660d68bbdd69507c1c8b4e33aa299278b1
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHBA-2019:0327
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2019:0163
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2019:0202
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2019:0324
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2019:0831
x_refsource_MISCExploitIssue TrackingThird Party Advisory
Source: [email protected]
https://bugs.chromium.org/p/project-zero/issues/detail?id=1700
x_refsource_MISCPatchVendor Advisory
Source: [email protected]
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.87

CVSS

2.1LOW[email protected]
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-863

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card