CVE-2018-12896: Integer Overflow
An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INTMAX, but the accounting is int based. This basically makes the accounting values, which are visible to user space via timergetoverrun(2) and siginfo::sioverrun, random. For example, a local user can cause a denial of service (signed integer overflow) via crafted mmap, futex, timercreate, and timersettime system calls.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.107-1Fixed in 7.1.12-1Fixed in 7.1.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-12896?
CVE-2018-12896 is classified as a high-severity vulnerability due to its potential for integer overflow leading to system instability.
How do I fix CVE-2018-12896?
To fix CVE-2018-12896, upgrade to a patched version of the Linux kernel, specifically 5.10.223-1, 5.10.226-1, 6.1.123-1, or later.
Which versions of the Linux kernel are affected by CVE-2018-12896?
CVE-2018-12896 affects Linux kernel versions up to and including 4.17.3.
What systems are vulnerable to CVE-2018-12896?
Systems using vulnerable versions of the Linux kernel include various distributions of Debian and Ubuntu Linux.
Can CVE-2018-12896 be exploited remotely?
CVE-2018-12896 could potentially be exploited locally, but it requires specific conditions related to POSIX timers.