CVE-2018-6554

N/A

Published: September 4, 2018 at 06:00 PM UTC

Updated: June 17, 2026 at 02:02 AM UTC

4 products affected across 4 vendorsLinux KernelDebian LinuxUbuntu Linux

Using Linux Kernel by Linux Kernel?

Get instant alerts when new vulnerabilities affect Linux Kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.5%

Description

Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IRDA socket.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

12.04 14.04 16.04 18.04

Debian Linux · Debiandrupal

95%

8.0 9.0

Linux Kernel · Linux

95%

v < 4.17

Affected range stops below 4.17, so it looks safe — our inference, not a vendor statement

Linux Kernel · Linux Kernel

60%

v < 4.17

Affected range stops below 4.17, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (13)

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/105302

Mailing Listx_refsource_MLISTThird Party Advisory

Source: [email protected]

https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html

Mailing Listx_refsource_MLISTThird Party Advisory

Source: [email protected]

https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html