CVE-2018-10902: Use After Free
It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in sndrawmidiinputparams() and sndrawmidioutputstatus() which are part of sndrawmidiioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.
Other sources
It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double-realloc (double free) in sndrawmidiinputparams() and sndrawmidioutputstatus() which are part of sndrawmidiioctl() handler in rawmidi.c file. A malicious local attacker could possibly use this for privilege escalation.
Upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=39675f7a7c7e7702f7d5341f1e0d01db746543a0
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.107-1Fixed in 7.1.12-1Fixed in 7.1.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10902?
The severity of CVE-2018-10902 is classified as medium due to the potential for local attackers to exploit the vulnerability.
How do I fix CVE-2018-10902?
To fix CVE-2018-10902, update your kernel to the latest available version, specifically versions such as 5.10.223-1 or 6.1.123-1 depending on your distribution.
What versions are affected by CVE-2018-10902?
CVE-2018-10902 affects specific versions of Debian, Ubuntu, Red Hat Enterprise Linux, and the Linux Kernel.
What type of attack does CVE-2018-10902 facilitate?
CVE-2018-10902 facilitates local privilege escalation attacks due to inadequate protection against concurrent access.
Is CVE-2018-10902 present in the latest kernel versions?
CVE-2018-10902 has been addressed in kernel updates released after its discovery, so ensure your system is running an updated kernel version.