CVE-2018-14625: Race Condition
A flaw was found in Linux Kernel in which an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AFVSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AFVSOCK messages destined to other clients.
Introduced by: https://github.com/torvalds/linux/commit/433fc58e6bf2c8bd97e57153ed28e64fd78207b8
References: https://syzkaller.appspot.com/bug?extid=bd391451452fb0b93039
Other sources
A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AFVSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AFVSOCK messages destined to other clients.
A flaw was found where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AFVSOCK protocol to gather a 4 byte information leak or possibly impersonate AFVSOCK messages destined to other clients or leak kernel memory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.0-1062.rt56.1022.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-1062.el7 - Upgrade
Upgrade
redhat/kernel-altto a version that resolves this vulnerability.Fixed in 0:4.14.0-115.16.1.el7a - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2018-14625?
CVE-2018-14625 is classified as a medium severity vulnerability due to the potential for information leakage.
How do I fix CVE-2018-14625?
To fix CVE-2018-14625, update your Linux kernel to a patched version as specified in the security advisories for your distribution.
What kind of attack does CVE-2018-14625 enable?
CVE-2018-14625 allows an attacker to perform an uncontrolled read from kernel memory within a VM guest.
Which systems are affected by CVE-2018-14625?
CVE-2018-14625 affects various versions of the Linux kernel across multiple distributions including Red Hat, Debian, and Ubuntu.
What protocol is involved in CVE-2018-14625?
CVE-2018-14625 involves the AF_VSOCK protocol which may be exploited to gather sensitive information.