CVE-2018-1130: Null Pointer Dereference
A null pointer dereference in dccpwritexmit() function in net/dccp/output.c in the Linux kernel allows a local user to cause a denial of service by a number of certain crafted system calls.
References:
https://syzkaller.appspot.com/bug?id=833568de043e0909b2aeaef7be136db39d21ba94
https://marc.info/?t=152036611500003&r=1&w=2
http://seclists.org/oss-sec/2018/q2/100
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67f93df79aeefc3add4e4b31a752600f834236e2
Other sources
Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccpwritexmit() function in net/dccp/output.c in that allows a local user to cause a denial of service by a number of certain crafted system calls.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.16 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Configuration
Create/modify /etc/modprobe.d/blacklist-dccp.conf to blacklist DCCP IPv4/IPv6 autoloading aliases by adding: alias net-pf-10-proto-0-type-6 off alias net-pf-10-proto-33-type-6 off alias net-pf-2-proto-0-type-6 off alias net-pf-2-proto-33-type-6 off
Linux kernel module autoloading (dccp) via modprobe blacklist-dccp.conf aliases = alias net-pf-10-proto-0-type-6 off; alias net-pf-10-proto-33-type-6 off; alias net-pf-2-proto-0-type-6 off; alias net-pf-2-proto-33-type-6 off
Event History
Frequently Asked Questions
What is CVE-2018-1130?
CVE-2018-1130 is a vulnerability in the Linux kernel that allows a local user to cause a denial of service.
How severe is CVE-2018-1130?
CVE-2018-1130 has a severity level of medium.
Which versions of Linux kernel are affected by CVE-2018-1130?
Linux kernel versions 3.13.0-153.203, 4.4.0-127.153, 4.13.0-46.51, and 4.16~ are affected by CVE-2018-1130.
How can I fix CVE-2018-1130?
To fix CVE-2018-1130, you should update your Linux kernel to version 4.16 or higher.
Where can I find more information about CVE-2018-1130?
You can find more information about CVE-2018-1130 on the following references: [link1](https://marc.info/?l=linux-netdev&m=152036596825220&w=2), [link2](https://syzkaller.appspot.com/bug?id=833568de043e0909b2aeaef7be136db39d21ba94), [link3](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1130).